News for hackers. Stuff that matters.

A comment on The tale of aux.c. Parent comment

Re:The tale of aux.c by inopinatus on Tuesday September 26, 2017 @05:25AM (#15337282)
If you'd like a real world example, I once used the predictably of core dump filenames to (legitimately) gain root access to a busy public nameserver.

https://inopinatus.org/2015/08/24/privilege-escalation/ has the detail.

[ Parent | on HN ]
Re:The tale of aux.c by inopinatus on Tuesday September 26, 2017 @07:30AM (#15337728)
(^predictability)
[ Parent | on HN ]