Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.LINUX_CVE-2019-14287.NBIN
HistoryFeb 09, 2021 - 12:00 a.m.

Linux sudo Privilege Escalation Vulnerability (direct check)

2021-02-0900:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
90

Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, allows to run commands as root by specifying the user ID -1 or 4294967295. This could allow a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access.

Binary data linux_cve-2019-14287.nbin
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel