Never-before-seen Linux malware gets installed using 1-day exploits

catculation@lemmy.zip to Technology@lemmy.world – 398 points –
Never-before-seen Linux malware gets installed using 1-day exploits
arstechnica.com
86

You are viewing a single comment

My university has us use Ivanti to connect to our network from offsite...

These vpns seem to be quite a good target since at least the one my university uses is run as a setuid executable, so if there is a vulnerability in there, you can execute code as root that wasn't intended to be executed as root.