5628 matches found
CVE-2017-7642: Untrusted Search Path
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
PT-2017-17858
Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21 Description The issue allows local users to gain root privileges due to the failure to verify the path to the encoded ruby script or scrub the PATH variable in the sudo helper of...
SSH Commands Require Privilege Escalation
This plugin reports the SSH commands that failed with a response indicating that privilege escalation is required to run them. Either privilege escalation credentials were not provided, or the command failed to run with the provided privilege escalation credentials. NOTE: Due to limitations...
Hashicorp vagrant-vmware-fusion 4.0.20 - Local Privilege Escalation
Hashicorp vagrant-vmware-fusion 4.0.20 - Local Privilege Escalation I'm a big fan of Hashicorp but this is an awful bug to have in software of their calibre. Their vagrant plugin for vmware fusion uses a product called Ruby Encoder to protect their proprietary ruby code. It does this by turning t...
Hashicorp vagrant-vmware-fusion <= 4.0.20 - Local root Privilege Esclation Exploit
Exploit for macOS platform in category local exploits I'm a big fan of Hashicorp but this is an awful bug to have in software of their calibre. Their vagrant plugin for vmware fusion uses a product called Ruby Encoder to protect their proprietary ruby code. It does this by turning the ruby code...
Fedora 26 : sudo (2017-8b250ebe97)
update to 1.8.20p2 - added sudo package to dnf/yum protected packages ---- - update to 1.8.20p1 - fixes CVE-2017-1000367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...
Virtuozzo 7 : sudo / sudo-devel (VZLSA-2016-2872)
An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Updated sudo packages fix security vulnerability
A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. CVE-2017-1000367...
MGASA-2017-0207 Updated sudo packages fix security vulnerability
A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. CVE-2017-1000367...
Virtuozzo 6 : sudo / sudo-devel (VZLSA-2017-1574)
An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...
Virtuozzo 6 : sudo / sudo-devel (VZLSA-2017-1382)
An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
EulerOS 2.0 SP2 : sudo (EulerOS-SA-2017-1121)
According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process statu...
EulerOS 2.0 SP1 : sudo (EulerOS-SA-2017-1120)
According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process statu...
Amazon Linux AMI : sudo (ALAS-2017-855)
It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root...
Medium: sudo
Issue Overview: It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their...
SUSE SLES12 Security Update : sudo (SUSE-SU-2017:1778-1)
This update for sudo fixes the following issues : - A regression in the fix for the CVE-2017-1000368 that broke sudo with the 'requiretty' flag bsc1045986 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...
Debian DLA-1011-1 : sudo security update
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution. The previous announcement DLA-970-1 was about a similar security issue CVE-2017-1000367 which wasn't...
SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2017:1771-1)
This update for sudo fixes the following issues : - A regression in the fix for the CVE-2017-1000368 that broke sudo with the 'requiretty' flag bsc1045986 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...