Re: Strange change to the DSA-222 web page

[Peter Karlsson <peter@softwolves.pp.se>]

Gerfried Fuchs:

>  Uh, you gain unprivileged access _to the lp account_ but are not
> privileged to gain it.

But gaining unprivileged access (i.e access that cannot do anything) is
not a security hole. It's the gaining of privileged access (for example
to lp, which has access to the printer spool) that's dangerous. Of
course you yourself are unprivileged, that's the whole idea behind
those security holes, to elevate your privileges illegitemately.

-- 
\\//
Peter - http://www.softwolves.pp.se/
  I do not read or respond to mail with HTML attachments.