OpenBSD 6.6 Multiple Authentication Bypass Vulnerabilities

Binary data openbsdauthbypass.nbin...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

Design/Logic Flaw

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...

CVE-2019-19519

OpenBSD 6.6 vulnerability CVE-2019-19519: a logic error in su.c enables a local user to use su -L to login with another user’s login class, enabling local privilege escalation. Affected software is OpenBSD 6.6; the flaw resides in the main function of su/su.c. Consequences include bypassing inten...