*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Jamie Strandboge
(jdstrand):
selecting recovery mode from the grub boot menu presents you with a root
terminal without prompting you for a password. this doesnt seem smart.
thats pretty much all there is to it. it seems pretty significant too,
you know? even if you remove the entry, anyone can boot grub with custom
boot options to access the recovery terminal with root powers. sound
serious.
** Affects: ubuntu
Importance: Undecided
Status: Won't Fix
--
anyone can gain root access to your system by selecting "recovery mode" grub
option
https://bugs.launchpad.net/bugs/277897
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
