bugGKSu - Bugs: bug #22374, Possible security issue with...

 
 

bug #22374: Possible security issue with --description

Submitter:  None
Submitted:  Thu 21 Feb 2008 02:22:37 PM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 21 Feb 2008 02:22:37 PM UTC, original submission:  

The --description option allows you to show a random string instead of the command you are executing. This could facilitate an elevation of privilege for an application that has normal user rights. It can do this by modifying menu entries that use gksu to launch applications with administrative rights. When prompted with the gksu dialog you will see only the provided description, not the command you are running.

Example:
In Ubuntu 7.10 I am able to modify the menu entry for Synaptic Package Manager with normal user rights from
gksu /usr/sbin/synaptic
to something like
gksu --description synaptic /home/user/.sinaptic
, where the .sinaptic script runs some "evil code" and starts the real synaptic.

I propose to show the command gksu is running even if you have a description. Of course, the complete solution probably should include having those menu entries read-only for a normal user, but that is probably a gnome issue.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

No changes have been made to this item

Back to the top

Powered by Savane 3.13-758e.
Corresponding source code