The attack gives you ability to overwrite any cached page. So you don't need to be root to "edit" /etc/passwd.
Not of the host system, assuming we're talking about a compromised VM, running as a non-root user.
alt Hacker News
Not of the host system, assuming we're talking about a compromised VM, running as a non-root user.