News for hackers. Stuff that matters.

A comment on Heap-based buffer overflow in Sudo. Parent comment

Re:Heap-based buffer overflow in Sudo by 65a on Wednesday January 27, 2021 @09:32PM (#25937373)
It is almost always the case that a sufficiently malicious user can find a way to turn that into full blown root access.
[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by moistbar on Sunday January 31, 2021 @07:54AM (#25978441)
So that means they should get full blown root from the beginning?
[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by Spivak on Tuesday February 09, 2021 @10:58AM (#26078987)
IMHO yes because then you treat the access with the gravity that is required.
[ Parent | on HN ]