HPESBNS03976 rev.1 - HPE NonStop using Sudo

🗓️ 16 Jan 2020 00:00:00Reported by hpeType

HPE NonStop sudo issue allows local bypass; remove ALL Runas sudoers and apply SPR for T1202.

Reporter	Title	Published	Views	Family All 214
Gitee	Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo	1 Feb 202122:21	–	gitee
Gitee	Exploit for Use After Free in Microsoft	10 Aug 202010:06	–	gitee
Gitee	Exploit for Use After Free in Microsoft	4 Nov 202022:40	–	gitee
GithubExploit	Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo	15 Oct 201919:26	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Rubyonrails Rails	28 Aug 202522:15	–	githubexploit
GithubExploit	Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo	1 Apr 202618:18	–	githubexploit
GithubExploit	Exploit for Race Condition in Canonical Ubuntu_Linux	8 Nov 202506:10	–	githubexploit
GithubExploit	Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo	18 Oct 201904:11	–	githubexploit
GithubExploit	Exploit for Race Condition in Canonical Ubuntu_Linux	4 Feb 202601:58	–	githubexploit
ALT Linux	Security fix for the ALT Linux 8 package sudo version 1:1.8.28-alt1	31 Oct 201900:00	–	altlinux

Vulners

Node

oss_core_utilities_t1202_t1202l02Matcht1202l02^aan

Node

oss_core_utilities_t1202_t1202l02Matcht1202aao

Node

oss_core_utilities_t1202_t1202l02Matcht1202l02^aaq

Node

oss_core_utilities_t1202_t1202l02Matcht1202l02^aar

Node

oss_core_utilities_t1202_t1202l02Matcht1202l01^aaj

Node

oss_core_utilities_t1202_t1202l02Matcht1202j01

Node

oss_core_utilities_t1202_t1202l02Matcht1202j01^aap

Node

oss_core_utilities_t1202_t1202l02Matcht1202h01^aal

17 Jan 2020 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.8

CVSS 29

EPSS0.63764