75 matches found
saleemrashid-sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Crédito a Joe Vennix de Apple Information Security por encontrar el fallo...
cve-2019-18634
cve-2019-18634 上述CVE的分析是我一个学校模块的项目。如需完整分析,请参阅此仓库中的幻灯片。...
sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 感谢Apple Information Security的Joe Vennix发现此漏洞。...
CVE-2019-18634
CVE-2019-18634 ⚠️ 此代码仅在 sudo 1.8.25 上测试过。该漏洞影响 1.8.30 版本,但在字符处理方面存在差异,导致此 PoC 无法执行(这并不能减轻漏洞的可利用性)。参见 1 ⚠️ 针对 CVE-2019-18634 的功能性利用代码,这是一个堆缓冲区溢出漏洞,当 pwfeedback 启用时,会导致 sudo =1.8.30 权限提升。 https://dylankatz.com/Analysis-of-CVE-2019-18634/ 该仓库包含一个单文件脚本(self-contained.sh)以及用于生成该脚本的脚本(位于 src 目录下)。 感谢 yuu...
CVE-2019-18634
SUDO漏洞 CVE-2019-18634 用于Sudo漏洞BSS溢出的Python开发的利用程序(CVE-2019-18634)。 仅供学习研究 使用 root@kitploit: python run.py 致谢 https://github.com/Plazmaz/CVE-2019-18634 https://bestwing.me/CVE-2019-18634-analysis.html...
CVE-2019-18634
CVE-2019-18634 在Ubuntu 20.04、sudo版本1.8.25上可用的Python利用脚本 将"./shell.sh"替换为你的反弹shell 分析文章见 https://y3a.github.io/2021/04/17/sudo-cve-analysis/...
CVE-2019-18634
CVE-2019-18634...
-CVE-2019-18634-sudo-pwfeedback
-CVE-2019-18634-sudo-pwfeedback Resumen Este repositorio contiene una prueba de concepto PoC para CVE-2019-18634, una vulnerabilidad en sudo que afecta a sistemas con la opción pwfeedback habilitada. La vulnerabilidad permite a un atacante local escalar privilegios a root explotando un...
sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 感谢 Joe Vennix(来自 Apple 信息安全部门)发现此漏洞。...
MiracleLinux 7 : sudo-1.8.23-4.el7.2 (AXSA:2020-4467:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4467:01 advisory. sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Tenable has extracted the preceding description block directly from the...
MiracleLinux 8 : sudo-1.8.25p1-8.el8.1 (AXSA:2020-117:04)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-117:04 advisory. sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Tenable has extracted the preceding description block directly from the MiracleLin...
TencentOS Server 3: sudo (TSSA-2022:0113)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0113 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Exploit for Out-of-bounds Write in Sudo_Project Sudo
CVE-2019-18634 N-Day Exploit Slides https://docs.googl...
SUSE: Security Advisory (SUSE-SU-2020:0406-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1627)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : sudo (CESA-2020:0487)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0487 advisory. - sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Note that Nessus has not tested for this issue but has instead relied only on the...
NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2020-0096)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability: - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is ...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-2238)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2020-2238)
According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2020-2237)
According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process...