On Wed, Jul 26, 2006 at 11:35:37AM -0400, James Vega wrote:
> On Wed, Jul 26, 2006 at 10:20:05AM +0200, Marc Weber wrote:
> > I did notice that you can do
> > su
> > gvim
> > :echo SERVERNAME
> > 
> > and then using another user
> > gvim --servername=GVIMxx --remote-send='!/dowhatyouwant ;-)'
> > 
> > Thus: If you know your admin is using vim you can easily try to get one
> > gvim instance to execute arbitrary commands as super user!!
> 
> Performing a simple "su" saves the environment that you su'ed from.  If
> you instead ran "su -", I imagine this would not work.
su - does work also.

When using ssh [EMAIL PROTECTED]
I can start gvim but v:server isn't set
Using Ctrl-Meta-F4
Login as root a can't connect to X in any way .. (even when using xclock
-display :0.0 or DISPLAY=:0.0 xclock)

Can you recommend some documentation so that I won't make alerts like
this again?

Marc

Reply via email to