Full Disclosure: Re: I find a bug

[Harry Behrens <harry () behrens com>]

this very smart prince of the East is obviously listed in /etc/sudoers...;-)

-h

On 18.01.2011 16:47, Laurelai Storm wrote:
> I have fedora 14, several centOS 5.5 machines and a vanilla ubuntu
> 9.10 vm, all ask for the password
>
>
> 2011/1/18 Christian Sciberras <uuf6429 () gmail com
> <mailto:uuf6429 () gmail com>>
>
>     Every bug is a feature. Some are less obvious than others.
>
>     ;-)
>
>     Oh, and for what it's worth, I get asked for the root password on
>     my machine (vanilla ubuntu).
>
>
>
>
>
>     2011/1/18 Laurelai Storm <laurelai () oneechan org
>     <mailto:laurelai () oneechan org>>
>
>         It prompts for a password on my machine, perhaps you should
>         check your sudoers config.
>
>         Also, its not a bug its a feature :p
>
>         2011/1/18 我是王子 <tradeprince () qq com
>         <mailto:tradeprince () qq com>>
>
>             hello,
>             I found a bug,
>             run [sudo strace su] command can get root privileges
>             without any password.
>             bill
>             ------------------ Original ------------------
>             *From: * "Steve Beattie"<sbeattie () ubuntu com
>             <mailto:sbeattie () ubuntu com>>;
>             *Date: * Thu, Jan 13, 2011 08:01 PM
>             *To: *
>             "ubuntu-security-announce"<ubuntu-security-announce () lists ubuntu com
>             <mailto:ubuntu-security-announce () lists ubuntu com>>;
>             *Cc: * "full-disclosure"<full-disclosure () lists grok org uk
>             <mailto:full-disclosure () lists grok org uk>>;
>             "bugtraq"<bugtraq () securityfocus com
>             <mailto:bugtraq () securityfocus com>>;
>             *Subject: * [USN-1042-2] PHP5 regression
>             -- 
>             ubuntu-security-announce mailing list
>             ubuntu-security-announce () lists ubuntu com
>             <mailto:ubuntu-security-announce () lists ubuntu com>
>             Modify settings or unsubscribe at:
>             https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
>
>
>             _______________________________________________
>             Full-Disclosure - We believe in it.
>             Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>             Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>         _______________________________________________
>         Full-Disclosure - We believe in it.
>         Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>         Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/