patch_CVE-2023-22809

patchCVE-2023-22809 Bashスクリプト: sudoのインストール このBashスクリプトは、システムに最新版のsudoを自動的にインストールします。 前提条件 Linuxベースのオペレーティングシステム wgetパッケージがインストールされていること（パッケージマネージャーを使用してインストール可能） 使用方法 1. このリポジトリをローカルマシンにクローンまたはダウンロードします。 2. スクリプトが含まれているディレクトリに移動します。 3. スクリプトのディレクトリでターミナルを開きます。 4. 以下のコマンドでスクリプトを実行可能にします： chmod +x...

CVE-2023-22809-Exploiter

CVE-2023-22809 漏洞利用脚本 免责声明 此脚本仅供教育目的使用。作者对其使用造成的任何滥用或意外后果不承担责任。在测试任何安全工具或漏洞之前，请始终遵循道德准则并获得适当授权。 描述 该 Python 和 Bash 脚本旨在利用 sudo 版本 1.8.0 至 1.9.12p1 中的 CVE-2023-22809 漏洞。该漏洞允许本地攻击者通过利用对 sudoedit 或 sudo -e 命令的不当处理来提升权限。 要求 Python 3.x | Bash 目标机器上安装了 sudo 版本 1.8.0 至 1.9.12p1 能够访问 sudo 命令，并具有潜在的...

SUDO-privilege-escalation

SUDO 权限提升 概述： 本项目演示了 Sudo 权限提升漏洞（CVE-2023-22809）的利用。目的是模拟攻击者如何在受控环境中通过利用此漏洞获得未经授权的 root 访问权限。 使用的技术： 操作系统： Parrot OS, Ubuntu 工具： Sudo 命令, Bash 脚本 环境： 虚拟化环境，用于安全测试和执行 涉及的步骤 手动攻击模拟： 首先，手动模拟漏洞以了解其机制和潜在影响。 漏洞利用开发： 开发了一个 Bash 脚本来自动化利用过程。 执行： 在安全的虚拟化环境中运行自动化脚本，以确认漏洞利用的有效性。 缓解措施： 识别并应用了保护系统免受此漏洞影响的应对措施。...

CVE-2023-22809-sudo-POC

CVE-2023-22809-sudo-POC CVE-2023-22809 Linux Sudo...

CVE-2023-22809

CVE-2023-22809...

Photon OS 5.0: Sudo PHSA-2023-5.0-91-0043

An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0043. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 7 : sudo-1.8.23-10.el7.3 (AXSA:2023-4846:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-4846:02 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : sudo-1.9.5p2-7.el9.1 (AXSA:2023-4872:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4872:03 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the...

Exploit for Improper Privilege Management in Sudo_Project Sudo

CVE-2023-22809-automated-python-exploits automatically exploit...

TencentOS Server 3: sudo (TSSA-2023:0015)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0015 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: sudo (TSSA-2023:0133)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0133 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Security Bulletin: Vulnerability in SUDO affects IBM Integrated Analytics System (Sailfish)[CVE-2023-22809, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465]

Summary The SUDO package is used by IBM Integrated Analytics System . IBM Integrated Analytics System has addressed the applicable CVECVE-2023-22809, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465 Vulnerability Details CVEID:CVE-2023-22809 DESCRIPTION: In Sudo before 1.9.12p2, the sudoedit aka -e...

ABB M2M Gateway Improper Privilege Management in embedded Sudo (CVE-2023-22809)

In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected...

Security Bulletin: Vulnerability in Sudo affects IBM Integrated Analytics System (Sailfish)[CVE-2023-22809, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465].

Summary The Sudo package is used by IBM Integrated Analytics System . IBM Integrated Analytics System has addressed the applicable CVECVE-2023-22809, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465. Vulnerability Details CVEID:CVE-2023-22809 DESCRIPTION: In Sudo before 1.9.12p2, the sudoedit aka -...

Alibaba Cloud Linux 3 : 0010: sudo (ALINUX3-SA-2023:0010)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0010 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-22809: In Sudo before 1.9.12p2, the sudoed...

Exploit for Improper Privilege Management in Sudo_Project Sudo

CVE-2023-22809 Exploiter Scripts Disclaimer This script is pr...

Advisory ROSA-SA-2024-2396

Software: sudo 1.8.29 OS: ROSA Virtualization 2.1 packageevrstring: sudo-1.8.29-8.rv3.1 CVE-ID: CVE-2023-22809 BDU-ID: 2023-00210 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the sudoedit function of the Sudo system administration program is related to errors in the handling of additional...

CentOS 9 : sudo-1.9.5p2-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the sudo-1.9.5p2-9.el9 build changelog. - arbitrary file write with privileges of the RunAs user CVE-2023-22809 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : sudo (CESA-2023:0284)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:0284 advisory. - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR, VISUAL, and...

Rocky Linux 9 : sudo (RLSA-2023:0282)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0282 advisory. - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR, VISUAL, and...