bugThe FreeType Project - Bugs: bug #47429, GRUB edition can allow an user to...

 
 

bug #47429: GRUB edition can allow an user to have any privilege it wants

Submitted by:  None
Submitted on:  Wed 16 Mar 2016 04:50:50 PM UTC  
Votes:  100  
 
Severity: 3 - NormalItem Group: Hack required
Status: InvalidPrivacy: Public
Assigned to: Werner LEMBERG <wl>Open/Closed: Closed
Planned Release: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 16 Mar 2016 07:12:02 PM UTC, comment #2:

Sorry, this is the FreeType project. I'm marking this bug report as invalid.

Please resubmit to the right project!

Werner LEMBERG <wl>
Project AdministratorIn charge of this item.
Wed 16 Mar 2016 05:17:04 PM UTC, comment #1:

Submitted by Giovanni Custódio Martins and João Otávio de Góes.
Date: 16/02/2016 15:32:11
Posted on: 16/03/2016 04:50:50 PM GMT

-Deleted Account- <johngoes>
Wed 16 Mar 2016 04:50:50 PM UTC, original submission:

Tested version: GNU GRUB 2.02 beta 2-22+deb8u1 <

Machine architecture: Intel Core i5 - 4200Um 1.6GHz, 8GB RAM, HDD 500GB, multiboot system; Intel Pentium 2117U, 1.80GHz (dual core), 4GB RAM, 250GB, virtual machine emulated system.

Tested target systems: Kali Linux 2.0, Kali Linux 1.0 and Windows (10).

Priority: Severe (major)

Primary effect: bypassing login (changing password of a Linux's account)

Secondary effect: having access (as a privileged user) to all data/files/directories of the system

Main effect: having permission to modify/remove/add/execute anything you want in the system (that you wouldn't have access to it, without the password).

Date: 16/02/2016 15:32:11

Flaw view: When accessing GNU GRUB it's possible to see what systems you can boot. Pressing "e" you have access to the "advanced" settings of the boot option. In the "settings" you can edit the line "linux /boot/vmlinuz-4.0.0-kali1-amd64 root=UUID=f\cd578e80739f-42c8-b3ab-f4f6b602b776 ro initrd=/install/gtk/initrd.gz" to "linux /boot/vmlinuz-4.0.0-kali1-amd64 root=UUID=f\cd578e80739f-42c8-b3ab-f4f6b602b776 rw init=/bin/bash", by doing this, it will prompt you a bash screen (terminal) and then, you can change all system's settings (including user password, removing directories and even corrupting the system!

Solving Suggestion: attributing fixed low permissions to the bash when not logged in the system. It means: not having permission to view the data in directories and not changing system's settings (like the password).

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by wl (Posted a comment)
  • -unavailable- added by johngoes (Posted a comment)
  • -unavailable- added by johngoes (Voted in favor of this item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 100 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 16 Mar 2016 07:12:02 PM UTCwlStatusNone=>Invalid
      Assigned toNone=>wl
      Open/ClosedOpen=>Closed
    Wed 16 Mar 2016 05:12:21 PM UTCjohngoesCarbon-Copy-=>Added johngoes

    Back to the top


    Powered by Savane 3.1-cleanup1