• CameronDev
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    10 months ago

    Symlink or copy/rename could trigger it, as long as there is a user writable area with execute perms? /home usually allows exec?

    Also some of the exec* functions allow manipulating the argv[0], so possibly another vector there.