From 09544fdd224875fe4de85c1b11b4582e4748f54f Mon Sep 17 00:00:00 2001 From: Offensive Security Date: Fri, 29 Jul 2016 05:07:16 +0000 Subject: [PATCH] DB: 2016-07-29 --- platforms/linux/local/40169.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/platforms/linux/local/40169.txt b/platforms/linux/local/40169.txt index 0fd8ad54d..5844bcdaa 100755 --- a/platforms/linux/local/40169.txt +++ b/platforms/linux/local/40169.txt @@ -1,3 +1,5 @@ +// Source: http://blog.cmpxchg8b.com/2013/08/security-debianisms.html + On most modern Linux systems, /bin/sh is provided by bash, which detects that it's being invoked as sh, and attempts to mimic traditional sh. As everyone who works in security quickly learns, bash will drop privileges very early if uid != euid. 488