I was wondering why some versions are no longer vulnerable to this. To my knowledge, in order to run this code and access /etc/shadow on the host, you just need CAP_DAC_OVERRIDE and CAP_DAC_READ_SEARCH. So I assume as long as you have these you will be able to run it. Why the recent versions aren't vulnerable to this?
I was wondering why some versions are no longer vulnerable to this. To my knowledge, in order to run this code and access
/etc/shadowon the host, you just need CAP_DAC_OVERRIDE and CAP_DAC_READ_SEARCH. So I assume as long as you have these you will be able to run it. Why the recent versions aren't vulnerable to this?