5080 matches found
K000148482: Sudo vulnerability CVE-2019-19234
Security Advisory Description In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...
CVE-2024-48073
sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which...
CVE-2024-48073
sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which...
CVE-2024-48073
Summary: CVE-2024-48073 affects sunniwell HT3300 prior to 1.0.0.B022.2. The /usr/local/bin/update updater runs with sudo NOPASSWD and is vulnerable to a command injection, enabling an attacker to pass commands via command line arguments to gain elevated root privileges. Impact: total compromise o...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-2678)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-2644)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the system administration tool Sudo on Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the system administration tool Sudo in Windows operating systems is related to improper restrictions on communication channels for potential targets. Exploiting this vulnerability allows attackers to perform spoofing attacks...
Granular sudo Permissions for Management of Veeam Agent for Oracle Solaris
Purpose This article provides examples of granular 'sudo' configuration for the Linux account that will be used by Veeam Backup & Replication when managing Veeam Agent for Oracle Solaris deployments with a Protection Group. Solution The following granular sudo permissions were tested with Veeam...
Granular sudo Permissions for Management of Veeam Agent for IBM AIX
Purpose This article provides examples of granular 'sudo' configuration for the Linux account that will be used by Veeam Backup & Replication when managing Veeam Agent for IBM AIX deployments with a Protection Group. Solution The following tested granular sudo permissions are available: Veeam...
CVE-2024-43571
Sudo for Windows Spoofing Vulnerability...
CVE-2024-43571
Sudo for Windows Spoofing Vulnerability...
CVE-2024-43571 Sudo for Windows Spoofing Vulnerability
...
CVE-2024-43571
Technical details about CVE-2024-43571 are not publicly provided in the supplied documents. Monitor official advisories (MSRC/update guides) for affected products, impact, and fixes.
CVE-2024-43571 Sudo for Windows Spoofing Vulnerability
...
Sudo for Windows Spoofing Vulnerability
...
PT-2024-6788 · Unknown +1 · Sudo For Windows +1
Name of the Vulnerable Software and Affected Versions: Sudo for Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the system administration utility Sudo for Windows. It is caused by improper restriction of the communication channel for suppos...
Microsoft Sudo for Windows 安全漏洞
Microsoft Sudo for Windows is a new way for users of Microsoft Corporation USA as administrators to run elevated commands directly from an un-elevated console session on Windows. A security vulnerability exists in Microsoft Sudo for Windows. An attacker could exploit the vulnerability to perform...
systemd: privilege escalation via the less pager
A vulnerability was found in the systemd package. The systemd package does not adequately block local privilege escalation for some sudo configurations, for example, plausible sudoers files, in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to ...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Sudo Project Sudo [CVE-2023-28486]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Sudo Project Sudo, caused by improper escaping terminal control characters during logging operations CVE-2023-28486. Sudo Project Sudo is included as a Base OS package used...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Sudo Project Sudo [CVE-2023-28487]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Sudo Project Sudo, caused by improper escaping terminal control characters by the "sudoreplay -l" command CVE-2023-28487. Sudo Project Sudo is included as a Base OS package...