Redhat 7.0 local root via uucp

230

Author: JT Smith

Net-Security: “An earlier version(1) of makewhatis had a fault in the handling of compressed files that
allowed execution of arbitrary commands as root.

A patch for this problem was developed that seemed to be effective. However, the
patch was not restrictive enough in the metacharacters it filtered out.”

Category:

  • Linux