Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - News > Syndicated Linux News
User Name
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.


  Search this Thread
Old 07-09-2010, 10:30 AM   #1
LXer NewsBot
Registered: Dec 2005
Posts: 89,283

Rep: Reputation: 87
LXer: Ubuntu closes root hole

Published at LXer:

A flaw in the module pam_motd (message of the day), which displays the daily motto and other information after login (to the shell), can be exploited under Ubuntu to expand access rights. Attackers can exploit this vulnerability to gain root access. Ubuntu has already provided a patch for the flaw. Operators of multi-users systems should install it as soon as possible because directions are already in circulation via Twitter on how to exploit the flaw to get access rights to the password file /etc/shadow. The file can then not only be read, but changed.



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Mozilla closes security hole with Firefox 3.5.1 LXer Syndicated Linux News 0 07-17-2009 03:30 PM
LXer: All I Want For Christmas Is...To Be Sucked Into A Black Hole? LXer Syndicated Linux News 1 05-29-2009 03:12 AM
LXer: SplashTop Security Hole Still Exists LXer Syndicated Linux News 0 10-26-2008 11:43 PM
LXer: Remote hole affects Debian, Ubuntu LXer Syndicated Linux News 0 05-14-2008 06:20 AM
LXer: Can intelligence really help business get out of a hole? LXer Syndicated Linux News 0 06-11-2007 02:16 PM

All times are GMT -5. The time now is 02:45 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration