Dnia 29-07-2006, sob o godzinie 19:26 +0200, dragoran napisał(a):
> If you can issue such commands to the drive, you can easily:
> - become root
how could this lets a user become root?
Maybe he was thinking about sending
commands to any drive? Speaking to
hard disk drive one can edit /etc/passwd and so on. But we're talking
about CD drives, how can a CD drive make me root? People have suid
cdrecords on machines with shell accounts and to this point there was no
exploit using SCSI commands to gain privileges (the only one I know of
was using user-provided $RSH as root).
Lam