note 88873 deleted from function.chown by danbrown
| From: | danbrown@php.net | Date: | Wed, 11 Feb 2009 19:56:10 +0000 |
| Subject: | note 88873 deleted from function.chown by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-150512@lists.php.net to get a copy of this message | ||
Note Submitter: Dan
----
To Mikevac at yahoo dot com :
This is, in fact, so exceedingly dangerous as to render your system compromised. By allowing a
non-root user to change ownership of a file, a simple operation of:
1. Compile executable that spawns a Bash shell.
2. Set suid bits on said executable.
3. Change owner of said executable to root.
4. Run said executable.
is sufficient to 0wn the system in question.