Wicked exploit found in Linux WiFi
A zero day exploit has been discovered in popular wireless Linux manager WICD that allows an attacker to spawn a root shell on a target machine.
The privileged escalation exploit affects the latest versions of WICD (pronounced wicked) and was successfully tested on a handful of Linux distributions including the latest release of the penetration testing operating system BackTrack. It was not yet tested for remote exploitation vectors.
The exploit was discovered during a capture the flag competition by an anonymous student hacker at the InfoSec Institute in the US. The hacker supplied a python version of the zero day, and a patch for WICD.
