Even when prompted for a password? I had given my password to sudo only the first time; after executing (succesfully) the script once, it did not matter how many sudo -K/-k I did: if sudo prompted for my password and i wrote "asd" instead of it, or simply pressed "enter", I was given a rootshell. This is not expected and must not be allowed, because, to me, it means that if I leave my computer for a couple of seconds and someone runs this script in a non-root terminal, he will be able to gain root privileges whenever he wants...
-- Privilege Escalation Exploit with setenv or ALL (v. <= 1.6.9p18 ) https://bugs.launchpad.net/bugs/349075 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
