undefined | Better HN

0 pointswhatshisface7y ago0 comments

An RCE vulnerability has already been found.

0 pointswhatshisface7y ago0 comments

An RCE vulnerability has already been found.

0 comments

7 comments · 4 top-level

strictnein7y ago· 3 in thread

Despite what @HackerFantastic is going on about, sloppy remote debugging capabilities enabled with a debug flag isn't an RCE.

Tepix7y ago

It enables remote code execution, that's what RCE stands for.

The issue is with "vulnerability". By that loose definition, every modern IDE has an RCE "vulnerability".

It's a compile flag, it is not enabled by default.

If you specifically start GHIDRA in a debug mode, then yes there is a backdoor, but you asked for that.

Calling it a rce vuln is a bit of an exaggeration surely.

weej7y ago

Also know as debug mode.

j / k navigate · click thread line to collapse