It's strange that TrueSec (which is credited with this find) would not have any information about this exploit on their News[1], Blogs[2], or Facebook[3] pages.

It's strange that TrueSec (which is credited with this find) would not have any information about this exploit on their News[1], Blogs[2], or Facebook[3] pages. However, the video[4] posted yesterday seems to be uploaded from an account associated with them. Speaking of the video: as Johan Ylinenjarvi points out in the YouTube comments, the same effect could be achieved with a simple bash script like: echo <your_password> | sudo -S id Clearly, more information about the exploit is needed. [1] http://www.truesec.com/News http://www.truesec.com/News [2] http://www.truesec.com/Blogs http://www.truesec.com/Blogs [3] https://www.facebook.com/TrueSec.Inc https://www.facebook.com/TrueSec.Inc [4] http://www.youtube.com/watch?v=fCQg2I_pFDk http://www.youtube.com/watch?v=fCQg2I_pFDk