[Secure-testing-team] kernel allows loadkeys to be used by any user, allowing for local root compromise

Moritz Muehlenhoff jmm at inutil.org
Tue Oct 18 21:19:53 UTC 2005


Horms wrote:
> > The non-suid command "loadkeys" can be used by any local user having
> > console access. It does not just apply to the current virtual console
> > but to all virtual consoles and its effect persists even after logout.

This has been assigned CAN-2005-3257.

Cheers,
        Moritz




More information about the Secure-testing-team mailing list