Lucene search
K

Ubuntu Vivid Upstart Privilege Escalation

🗓️ 02 Mar 2015 00:00:00Reported by halfdogType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

Ubuntu Vivid Upstart Privilege Escalation from dev-branch issu

Code
`-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA1  
  
Although just reported to Ubuntu, this minor dev-branch issue was already made public. As the launchpad/lkml/... feed-miners should not play all the games alone, and as others may want to learn how beginner errors still make it into packages of quite large distributions, enjoy the power of  
  
for session in /run/user/*/upstart/sessions/*  
do  
env $(cat $session) /sbin/initctl emit rotate-logs >/dev/null 2>&1 || true  
done  
  
executed as root. See [1]  
  
hd  
  
  
[1] http://www.halfdog.net/Security/2015/UpstartLogrotationPrivilegeEscalation/  
  
- --   
http://www.halfdog.net/  
PGP: 156A AE98 B91F 0114 FE88 2BD8 C459 9386 feed a bee  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1  
  
iEYEARECAAYFAlTwJXEACgkQxFmThv7tq+4LKgCcCKMaOdO0xObIno415g6qZAxp  
LZQAnj8giZDPkLYZPD/TVhY958/vXMSJ  
=xyAX  
-----END PGP SIGNATURE-----  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation