sudo-snooper

sudo-snooper sudo-snooper age como o binário sudo original para enganar os usuários a inserir suas senhas. Ele mostrará um prompt falso, igual ao original, para o usuário inserir sua senha do sudo. Isso pode ser útil em testes de penetração ou avaliações de segurança para testar o conhecimento do...

DEBIAN-CVE-2019-19234

In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...

DEBIAN-CVE-2019-19232

In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as ...