CVE-2020-10587

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

EUVD-2020-3038

Malware in sbrugna...

antiX and MX Linux Input Validation Error Vulnerability

antiX Linux is a lightweight desktop Linux system distribution. antiX Linux is a Linux system distribution. An input validation error vulnerability exists in antiX and MX Linux that originates in the configuration of Sudo and can be exploited by a local attacker to gain root privileges...

CVE-2020-10587

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

Design/Logic Flaw

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

CVE-2020-10587

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

CVE-2020-10587

CVE-2020-10587 affects antiX and MX Linux. A local attacker can obtain root access through the Sudo configuration by abusing the persist-config --command /bin/sh vector. The root cause is a misconfigured Sudo setup that allows execution of a shell with elevated privileges from a local context. Pu...

PT-2020-12219

Name of the Vulnerable Software and Affected Versions antiX affected versions not specified MX Linux affected versions not specified Description The issue allows local users to achieve root access via "persist-config --command /bin/sh" due to the Sudo configuration. Recommendations For antiX,...

CVE-2020-10587: Undefined Security Weakness

antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration...

New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...