Root exploit in the wild

[Lamar Owen]

On Sunday 10 February 2008, Frank Cox wrote:
> https://bugzilla.redhat.com/show_bug.cgi?id=432229

Hmm.  I wonder if this is how the recent apache hosted servers were rooted 
remotely, even though the official explanation was password compromise.  
While this particular issue is a local exploit, if you can get code to run on 
the box as some user local to that box then you could get a remote exploit 
through this local one.

Any local exploit can easily become a remote exploit if script injection into 
rich app servers is possible.

Thanks for posting.
-- 
Lamar Owen
www.pari.edu