LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (http://www.linuxquestions.org/questions/linux-general-1/)
-   -   Think I might have just hit a privilege escalation bug (http://www.linuxquestions.org/questions/linux-general-1/think-i-might-have-just-hit-a-privilege-escalation-bug-885313/)

Cultist 06-08-2011 09:19 PM

Think I might have just hit a privilege escalation bug
 
I was logged into my regular user account, and decided I needed to do some stuff in console. So I hit ctrl+alt+backspace to kill KDE and drop to terminal. Soon as it dropped, I hit su, and started entering my password. But before I even finished typing the su password, it sort of crashed akonadi and suddenly I'm in root. Here's the lines exactly as they are on my console (its on another computer), swapping out my real username for myusername:

Code:

myusername@navi:~$
myusername@navi:~$ su
password:
root@navi:/home/myusername# naApplication 'akonadiserver' exited normally...

root@navi:/home/myusername#

notice the 'na' before the word Application, thats where I started to type in my root password. I know I couldn't have typed in the password without realizing it here, because I mistyped it - it should have begun with 'an' instead. That 'exit' announcement there appeared just as I began typing.

The segment of output I gave there is what shows after all the stuff that normally appears when you exit out of the WM the way I did.

So is this a known bug or did I find something new? Or is there a non-bug explanation?

Linux.tar.gz 06-09-2011 03:06 AM

Can you reproduce this ?

If yes, indeed, this is a problem, Houston.

H_TeXMeX_H 06-09-2011 03:15 AM

Interesting. Do try to reproduce it, or others who use KDE.

onebuck 06-09-2011 06:33 AM

Hi,

Why are you using 'ctrl+alt+backspace'? Problems with the X server? You should shutdown KDE via exit/leave unless you are experiencing problems.

I believe you started entering from the kybd device before the X server was shut down. Try exiting KDE normally, let things shut down gracefully. Then you should be able to do console work after X server resets.


All times are GMT -5. The time now is 01:17 PM.