Дырка в Blackboard Courseinfo

Непроверяемый ввод пользователя позволяет поменять пароль любого пользователя или создать нового...

shadow.root.uid.65536.txt

Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...