Re: [cobalt-users] Php Gallery root exploit

[Ryan Verner <xfesty@xxxxxxxxxxxxxxxxxxxxxxxxx>]

On 27/01/2004, at 5:40 AM, Bob Noordam wrote:

> Altough not strictly cobalt-only related, and certanly not a SUN 
> issue, i
> know this may hit multiple users around here, so i took the liberty of
> posting

<snip>

> Below is the fix for users of version 1.3x. Modify the INIT.PHP file, 
> and
> add the lines as indicated. If you do not fix this, full access may be
> gained to your machine.

Good advice, and thanks for posting, but how is this a root exploit, 
when the script (hopefully) doesn't even run as root? :-)

R

--

Signature space for rent.