freebsd bug !

Status
Not open for further replies.
G

gnumac

The office notify is too late, i lost my freebsd host !
look at the picture, that is the shell script, which will get the root account of your freebsd system.

getroot.png
 
Also, this is local and not remote one. Another good reason not to give user shell access until and unless they have rock solid requirements.

YMMV.
 
vivek said:
Also, this is local and not remote one. Another good reason not to give user shell access until and unless they have rock solid requirements.
Click to expand...
It can be used remote. If you're also running a vulnerable web application that allows command injection. Sure fire way of getting your box pwned.
 
Status
Not open for further replies.
Back
Top