CVE-2023-1326

CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞为 apport-cli 2.26.0 中的权限提升漏洞，类似于 CVE-2023–26604，此漏洞仅在 sudoers 中分配时才有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，类似于 CVE-2023-26604。如果系统被特别配置为允许非特权用户运行 sudo apport-cli，less 被配置为分页器，并且可以设置终端大小：本地攻击者可以提升权限。 PoC root@kitploit: sudo...

CVE-2023-1326-PoC

CVE-2023-1326-PoC 针对 apport-cli 2.26.0 中 CVE-2023–1326 的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞，与 CVE-2023–26604 类似，但仅在将 apport-cli 分配至 sudoers 中时有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，与 CVE-2023-26604 类似。如果系统被特殊配置为允许非特权用户运行 sudo apport-cli，且 less 被设置为分页器，同时终端大小可被设置：则本地攻击者可以提升权限。 PoC root@kitploi...

CVE-2023-1326

CVE-2023-1326 CVE-2023–1326 在 apport-cli 2.26.0 中的概念验证 此漏洞是 apport-cli 2.26.0 中的权限提升漏洞，类似于 CVE-2023–26604，该漏洞仅在 sudoers 中分配时才有效： 在 apport-cli 2.26.0 及更早版本中发现了一个权限提升攻击，类似于 CVE-2023-26604。如果系统被特殊配置允许非特权用户运行 sudo apport-cli，且 less 被配置为分页器，并且可以设置终端大小，则本地攻击者可以提升权限。 root@kitploit: sudo...

CVE-2023-1326-PoC

CVE-2023-1326-PoC Una prueba de concepto para CVE-2023–1326 en apport-cli 2.26.0 Esta vulnerabilidad es una escalada de privilegios en apport-cli 2.26.0, similar a CVE-2023–26604; esta vulnerabilidad solo funciona si se asigna en sudoers: Se encontró un ataque de escalada de privilegios en...

systemd: privilege escalation via the less pager

A vulnerability was found in the systemd package. The systemd package does not adequately block local privilege escalation for some sudo configurations, for example, plausible sudoers files, in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to ...

systemd: privilege escalation via the less pager

A vulnerability was found in the systemd package. The systemd package does not adequately block local privilege escalation for some sudo configurations, for example, plausible sudoers files, in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to ...

OESA-2024-1219 less security update

Less is a pager. A pager is a program that displays text files. Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files. Security Fixes: closealtfile in filename.c in less before 606 omits...

systemd: privilege escalation via the less pager

A vulnerability was found in the systemd package. The systemd package does not adequately block local privilege escalation for some sudo configurations, for example, plausible sudoers files, in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to ...

RHEL 8 : systemd (RHSA-2023:3837)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3837 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

SUSE: Security Advisory (SUSE-SU-2023:1622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2023-1129 less security update

Less is a pager. A pager is a program that displays text files.Other pagers commonly in use are more and pg. Pagers are often used in command-line environments like the Unix shell and the MS-DOS command prompt to display files.Less is not an editor. You can't change the contents of the file you'r...