CVE-2018-10852

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD befor...

CVE-2018-10852

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user...

CVE-2018-10852: Exposure of Sensitive Information to an Unauthorized Actor

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user. This affects versions of SSSD befor...

PT-2018-3920

Name of the Vulnerable Software and Affected Versions SSSD versions prior to 1.16.3 Description The issue is related to the UNIX pipe used by sudo to contact SSSD, which has overly permissive permissions. This allows anyone who can send messages using the same raw protocol as sudo and SSSD to rea...

BeRoot For Linux - Privilege Escalation Project

BeRoot is a post exploitation tool to check common misconfigurations on Linux and Mac OS to find a way to escalate our privilege. To understand privilege escalation on these systems, you should understand at least two main notions: LOLBins this name has been given for Windows binaries but it shou...

Security Bulletin: A vulnerability in sudo affects PowerKVM

Summary PowerKVM is affected by a vulnerability in sudo. IBM has now addressed this vulnerability, which is described by two CVEs. Vulnerability Details CVEID: CVE-2017-1000367 DESCRIPTION: sudo could allow a local attacker to gain elevated privileges, caused by improper parsing in the...

Security Bulletin: Vulnerabilities in sudo affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in sudo. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7032 DESCRIPTION: Sudo could allow a local authenticated attacker to execute arbitrary commands on the system, caused by the bypass of the sudo noexec...

Security Bulletin: A vulnerability in sudo affects PowerKVM (CVE-2016-7091)

Summary PowerKVM is affected by a vulnerability in the sudo package. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7091 DESCRIPTION: The Sudo package could allow a local attacker to obtain sensitive information, caused by the preservation of the value of INPUTRC...

Security Bulletin: A vulnerability in sudo affects IBM Flex System Manager (FSM) (CVE-2014-9680)

Summary A security vulnerability has been discovered in sudo that is embedded in the IBM FSM. This record addresses the issue. Vulnerability Details CVEID: CVE-2014-9680 DESCRIPTION: Todd Miller sudo could allow a local attacker to bypass security restrictions, caused by the failure to check the ...

CVE-2018-11134

In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password including root. A...

Design/Logic Flaw

In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password including root. A...

CVE-2018-11134: Weak Password Recovery Mechanism for Forgotten Password

In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password including root. A...

DEBIAN-CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

Design/Logic Flaw

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

CVE-2016-7076 affects the sudo utility prior to version 1.8.18p1. The root cause is a bypass of the noexec restriction when a user-supplied argument is passed to the C library function wordexp() during execution via sudo, enabling a local user to run an application with noexec and potentially exe...