Palo Alto Networks PanOS - 'root_trace' Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=912 The setuid root executable /usr/local/bin/roottrace essentially just does setuid0 then system"/usr/local/bin/masterd", which is a python script: $ ls -l /usr/local/bin/roottrace -rwsr-xr-x 1 root root 12376 Oct 17 2014...