CVE-2007-4305

CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...

Design/Logic Flaw

sudo, when linked with MIT Kerberos 5 krb5, does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5 environment variable settings. NOTE: another researcher...

CVE-2007-3149

sudo, when linked with MIT Kerberos 5 krb5, does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5 environment variable settings. NOTE: another researcher...

CVE-2007-3149

sudo, when linked with MIT Kerberos 5 krb5, does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5 environment variable settings. NOTE: another researcher...

CVE-2007-3149

CVE-2007-3149 concerns the sudo utility when linked with MIT Kerberos 5 (krb5). The vulnerability arises because sudo does not properly verify whether a user is currently authenticated to Kerberos, allowing local users to gain privileges via certain KRB5_ environment variable settings. The issue ...

CVE-2007-3149

sudo, when linked with MIT Kerberos 5 krb5, does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5 environment variable settings. NOTE: another researcher...

CVE-2007-3149

sudo, when linked with MIT Kerberos 5 krb5, does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5 environment variable settings. NOTE: another researcher...

MIT krb5: makes sudo authentication issue MUCH worse.

On Wed, Jun 06, 2007 at 11:19:01PM -0400, Thor Lancelot Simon wrote: On Wed, Jun 06, 2007 at 09:57:25PM -0400, Thor Lancelot Simon wrote: But woe betide any system administrator who accidentally puts a Kerberos-enabled sudo on a host that's configured as a Kerberos client only! Actually, if you...

Sudo: local root compromise with krb5 enabled

The 'sudo' package can be built to use Kerberos 5 for authentication of users. When a user is properly authenticated to sudo, sudo grants that user potentially limited root privileges. Thus a mistake in the authentication code in sudo is potentially severe: it can lead to a local root compromise...

sudo with Kerberos authentication privilege escalation

sudo fails to check granted tickets match to requested service, making it possible to use faked Kerberos server...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

Binary data 3947.prm...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...

Stack overflow

Multiple stack-based buffer overflows in utilities/smb4k.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration...

CVE-2007-0475

Multiple stack-based buffer overflows in utilities/smb4k.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration...

CVE-2007-0475

Multiple stack-based buffer overflows in utilities/smb4k.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration...

CVE-2007-0475

Multiple stack-based buffer overflows in utilities/smb4k.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration...

CVE-2007-0475

CVE-2007-0475 affects Smb4K before 0.8.0. The issue consists of multiple stack-based buffer overflows in utilities/smb4k_*.cpp that could allow a local user, who is on the Smb4K sudoers list, to escalate privileges through unspecified vectors related to the args variable and related state with su...

CVE-2007-0475

Multiple stack-based buffer overflows in utilities/smb4k.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration...

Mandrake Linux Security Advisory : sudo (MDKSA-2006:159)

Previous sudo updates were made available to sanitize certain environment variables from affecting a sudo call, such as PYTHONINSPECT, PERL5OPT, etc. While those updates were effective in addressing those specific environment variables, other variables that were not blacklisted were being made...

Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)

No description provided by source. include stdio.h include stdlib.h include unistd.h include sysexits.h include sys/wait.h define SUDO "/usr/bin/sudo" ifdef BUFSIZ undef BUFSIZ define BUFSIZ 128 endif / ANY MODIFIED REPUBLISHING IS RESTRICTED OpenBSD sudo 1.3.1 - 1.6.8p local root exploit Tested...