I think the reason so many people are talking about it is that it's just weird. Sure, the security implications aren't that bad, but it's just a really weird bug.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
It only affects configurations that restrict access as root *but allow access as -1*, i.e. use ALL. The way you phrase it it sounds like it affects any config that allows access as a user or group that isn't root.
You also mention "arbitrary commands" while any config that allows "arbitrary commands" as ALL, !root is already almost certainly vulnerable per se and a terrible idea and nobody should be doing that.
-
-
This Tweet is unavailable.
-
If nobody should be doing that then hopefully nobody is doing that, which makes the impact minimal, which means it's your job to minimize confused panic from those who might misunderstand otherwise.
- Show replies
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.