> What do you call something that grants root access without authentication, but wasn't intended to let arbitrary people or programs use it? Local privilege es

> What do you call something that grants root access without authentication, but wasn't intended to let arbitrary people or programs use it? Local privilege escalation. In a huge number of established LPEs, the exploit is by leveraging a weakness in checking who makes the call that allows legitimate privilege escalation. This is a legitimate privilege escalation (sshd binds to port 22, among others tasks), that can be exploited through a weakness in checking who is making that request and if they can have that granted.