Lucene search
+L

5624 matches found

Packet Storm
Packet Storm
•added 2021/02/03 12:00 a.m.•356 views

Sudo 1.9.5p1 Buffer Overflow / Privilege Escalation

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Date: 2021-02-02 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE :...

7.3AI score0.99962EPSS
SaveExploits83
Tenable Nessus
Tenable Nessus
•added 2021/02/03 12:00 a.m.•87 views

RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.4] (Important) (RHSA-2021:0401)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0401 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits85References19
Exploit DB
Exploit DB
•added 2021/02/03 12:00 a.m.•302 views

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Date: 2021-02-02 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE :...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
Exploit DB
Exploit DB
•added 2021/02/03 12:00 a.m.•581 views

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 2 Authors and Contributors: cts, help from r4j, debug by nu11secur1ty Date: 30.01.2021 Vendor: https://www.sudo.ws/ Link: https://www.sudo.ws/download.html CVE: CVE-2021-3156 + Source:...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
Wiz blog
Wiz blog
•added 2021/02/02 1:00 p.m.•15 views

Recent Linux sudo vulnerability affects a major percent of cloud workloads

With an estimated 90% of cloud workloads running Linux based OS, with sudo being common across distributions, many Linux cloud assets are at risk and may be affected. Versions released as far back as 2011 are affected by this vulnerability...

6.9AI score
SaveExploits0
CISA
CISA
•added 2021/02/02 12:00 a.m.•169 views

Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156

Sudo has released an advisory addressing a heap-based buffer overflow vulnerability—CVE-2021-3156—affecting sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. Sudo is a utility included in many Unix- and Linux-based operating systems that allows a user to run...

7.2CVSS7.2AI score0.99962EPSS
SaveExploits83References3
OpenVAS
OpenVAS
•added 2021/02/02 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1173)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.99962EPSS
SaveExploits85References4
Gitee
Gitee
•added 2021/02/01 10:21 p.m.•174 views

Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo

PoC exploit for CVE-2019-14287, a vulnerability in Sudo before 1.8.28. The exploit targets the ability of an attacker with access to a Runas ALL sudoer account to bypass certain policy blacklists and session PAM modules, and cause incorrect logging, by invoking sudo with a crafted user ID. The...

9CVSS8.1AI score0.63764EPSS
SaveExploits13
Gitee
Gitee
•added 2021/02/01 9:54 p.m.•28 views

Exploit for Off-by-one Error in Sudo_Project Sudo

This is a PoC exploit for CVE-2021-3156, a heap-based overflow vulnerability in sudo. The exploit is a C program that creates a shared library libnssX/P0PSH3LLZ.so.2 that overflows the heap when sudoedit is called. The exploit can be built using the provided Makefile and run using the...

7.8CVSS7.2AI score0.99962EPSS
SaveExploits83
Packet Storm
Packet Storm
•added 2021/02/01 12:00 a.m.•558 views

Sudo Buffer Overflow / Privilege Escalation

Exploit Title: Local Privilege Escalation - LPE Authors and Contributors: cts, help from r4j, debug by nu11secur1ty Date: 30.01.2021 Vendor: https://www.sudo.ws/ Link: https://www.sudo.ws/download.html CVE: CVE-2021-3156 + Credits: Ventsislav Varbanovski @ nu11secur1ty + Website:...

7.3AI score0.99962EPSS
SaveExploits83
zdt
zdt
•added 2021/02/01 12:00 a.m.•221 views

Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (2)

Sudo versions prior to 1.9.5p2 suffer from buffer overflow and privilege escalation vulnerabilities. Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 2 Authors and Contributors: cts, help from r4j, debug by nu11secur1ty Vendor: https://www.sudo.ws/...

7.8CVSS7.5AI score0.99962EPSS
SaveExploits83
zdt
zdt
•added 2021/02/01 12:00 a.m.•105 views

Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE : CVE-2021-3156 Credit...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•32 views

CentOS 8 : sudo (CESA-2020:0487)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0487 advisory. - sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Note that Nessus has not tested for this issue but has instead relied only on the...

7.8CVSS7.7AI score0.19276EPSS
SaveExploits15References2
Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•41 views

EulerOS 2.0 SP8 : sudo (EulerOS-SA-2021-1173)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.5p2 has a Heap-based Buffer Overflow,allowing privilege escalation to root via 'sudoedit -s' and a command-line argument that ends...

7.8CVSS7AI score0.99962EPSS
SaveExploits85References4
Tenable Nessus
Tenable Nessus
•added 2021/02/01 12:00 a.m.•45 views

CentOS 8 : sudo (CESA-2020:1804)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1804 advisory. - sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user CVE-2019-19232 Note that Nessus has not tested for this issue but...

7.5CVSS6.4AI score0.03295EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2021/01/31 4:10 p.m.•56 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based...

7.8CVSS7.4AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/31 7:01 a.m.•109 views

Exploit for Off-by-one Error in Sudo_Project Sudo

PoC exploit for CVE-2021-3156, a vulnerability in the Linux kern...

7.8CVSS6.9AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/31 3:38 a.m.•331 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax...

7.8CVSS7.5AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/30 8:39 p.m.•218 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 PoC Introduction This is an exploit for the...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/30 10:53 a.m.•64 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 checking CVE-2021-3156 vulnerability & patchi...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
Rows per page
Query Builder