Security News > 2018 > March > Privilege escalation on Unix machines via plugins for text editors

Privilege escalation on Unix machines via plugins for text editors
2018-03-20 20:34

Several of the most popular extensible text editors for Unix environments could be misused by attackers to escalate privileges on targeted systems, SafeBreach researchers have found. They tested Sublime, Vim, Emacs, Gedit, Pico and its clone Nano on machines running Ubuntu, and have managed to exploit the process of loading plugins to achieve privilege escalation with all except the last two. What seems to be the problem? These text editors achieve extensibility through third-party plugins, … More → The post Privilege escalation on Unix machines via plugins for text editors appeared first on Help Net Security.


News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/GvGnsSAwsfI/