Ubuntu

  1. Bug #152060
  2. Comment #0

Comment 0 for bug 152060

Revision history for this message
Andrea Corbellini (andrea.corbellini) wrote : Root access with a compromised menu entry

Steps to reproduce the bug:
 1. Go to ~/.local/share/applications.
 2. With a text editor, open a desktop entry of a program that needs root access, such as Synaptic.
 3. Replace the «Exec» field with:
Exec=gksu touch /hello
 4. Open the entry you have modified
 5. The "hello" file will magically appear
If instead of "touch /hello" I wrote "rm /*" what will happen?