Readline crime: exploiting a SUID logic bug

By roddux // Rory M I discovered a logic bug in the readline dependency partially reveals file information when parsing the file specified in the INPUTRC environment variable. This could allow attackers to move laterally on a box where sshd is running, a given user is able to login, and the user’s private key is […]

attackers box bug crime dependency environment environment variable exploiting file information key linux logic login parsing private private key variable