3 ms·
You're welcome to step in and explain, but I think it's pretty obvious why local vulnerabilities in non-setuid binaries aren't exactly "critical."
by dguido 13y ago
You're welcome to step in and explain, but I think it's pretty obvious why local vulnerabilities in non-setuid binaries aren't exactly "critical."
- betterunix 13y agohttps://xkcd.com/1200/ https://xkcd.com/1200/
- dguido 13y agoThat would only be accurate if you could trigger one of these bugs remotely.
- betterunix 13y ago...or if you can trick the user into opening a malicious file. An exploit in ls? Send them a zip, tarball, etc. with a maliciously named file.