Lucene search
+L

4835 matches found

OSV
OSV
added 2021/01/12 9:15 a.m.33 views

CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

7.8CVSS6.9AI score
SaveExploits0References8
NVD
NVD
added 2021/01/12 9:15 a.m.15 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS4AI score0.01029EPSS
SaveExploits1References7
OSV
OSV
added 2021/01/12 9:15 a.m.46 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS4.6AI score
SaveExploits0References7
OSV
OSV
added 2021/01/12 9:15 a.m.4 views

ALPINE-CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS6.7AI score0.01029EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/01/12 9:15 a.m.6 views

CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

7.8CVSS7.1AI score0.01066EPSS
SaveExploits1References13
UbuntuCve
UbuntuCve
added 2021/01/12 9:15 a.m.388 views

CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

7.8CVSS7.2AI score0.01066EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2021/01/12 9:15 a.m.38 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS6.8AI score0.01029EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/12 9:15 a.m.33 views

Code injection

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

4.4CVSS7.7AI score0.01066EPSS
SaveExploits1References8Affected Software2
Prion
Prion
added 2021/01/12 9:15 a.m.25 views

Race condition

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

1.9CVSS5.2AI score0.01029EPSS
SaveExploits1References7Affected Software3
Debian CVE
Debian CVE
added 2021/01/12 8:17 a.m.53 views

CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

7.8CVSS8.1AI score0.01066EPSS
SaveExploits1
CVE
CVE
added 2021/01/12 8:17 a.m.339 views

CVE-2021-23240

CVE-2021-23240 affects sudoedit in sudo prior to 1.9.5. An unprivileged local user can replace a temporary file with a symlink to an arbitrary target, enabling a file-ownership escalation attack. Impact is described for SELinux RBAC environments in permissive mode; machines without SELinux are no...

7.8CVSS7.8AI score0.01066EPSS
SaveExploits1References8Affected Software1
AlpineLinux
AlpineLinux
added 2021/01/12 8:17 a.m.67 views

CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

7.8CVSS8.1AI score0.01066EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/01/12 12:0 a.m.33 views

FreeBSD : sudo -- Potential information leak in sudoedit (6193b3f6-548c-11eb-ba01-206a8a720317)

Todd C. Miller reports : A potential information leak in sudoedit that could be used to test for the existence of directories not normally accessible to the user in certain circumstances. When creating a new file, sudoedit checks to make sure the parent directory of the new file exists before...

2.5CVSS6.8AI score0.01029EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/01/12 12:0 a.m.40 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

5.9AI score0.01029EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2021/01/12 12:0 a.m.58 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS6AI score0.01029EPSS
SaveExploits1
CVE
CVE
added 2021/01/12 12:0 a.m.395 views

CVE-2021-23239

The CVE-2021-23239 entry concerns the sudoedit personality in sudo up to version 1.9.4 (before 1.9.5). A race condition in sudoedit (sudo_edit.c) can allow a local, unprivileged user to determine directory existence by substituting a user-controlled directory with a symlink to an arbitrary path, ...

2.5CVSS5.5AI score0.01029EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2021/01/12 12:0 a.m.37 views

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path...

2.5CVSS6AI score0.01029EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/01/12 12:0 a.m.35 views

Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2021-011-01)

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-011-01. The text itself is copyright C Slackware Linux,...

7.8CVSS6.7AI score0.01066EPSS
SaveExploits2References3
Slackware Linux
Slackware Linux
added 2021/01/11 8:6 p.m.78 views

[slackware-security] sudo

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/sudo-1.9.5-i586-1slack14.2.txz: Upgraded. This update fixes security issues: Potential information leak in sudoedit that...

7.8CVSS0.2AI score0.01066EPSS
SaveExploits2
CNNVD
CNNVD
added 2021/01/11 12:0 a.m.13 views

Sudo Backlink Vulnerability

Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A backlink vulnerability exists in versions of Sudo prior to 1.9.5 that allows an attacker to test for the existence of a directory anywhere on the file system...

2.5CVSS6.8AI score0.01029EPSS
SaveExploits1References20
Rows per page
Query Builder