201 matches found
MGASA-2015-0443 Updated sudo packages fix security vulnerability
An unauthorized privilege escalation was found in sudoedit in sudo before 1.8.15 when a user is granted with root access to modify a particular file that could be located in a subset of directories. It seems that sudoedit does not check the full path if a wildcard is used twice e.g...
Updated sudo packages fix security vulnerability
An unauthorized privilege escalation was found in sudoedit in sudo before 1.8.15 when a user is granted with root access to modify a particular file that could be located in a subset of directories. It seems that sudoedit does not check the full path if a wildcard is used twice e.g...
Sudo 1.8.14 (RHEL 567 Ubuntu) - Sudoedit Unauthorized Privilege Escalation
Sudo 1.8.14 RHEL 567 Ubuntu - Sudoedit Unauthorized Privilege Escalation Exploit Title: sudo -e - a.k.a. sudoedit - unauthorized privilege escalation Date: 07-23-2015 Exploit Author: Daniel Svartman Version: Sudo ALL=root NOPASSWD: sudoedit /home///test.txt Then, logged as that user, create a...
SudoEdit 1.6.8 - Local Change Permission Exploit
No description provided by source...
RHEL 6 : sudo (RHSA-2011:0599)
An updated sudo package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
sudoedit local privilege escalation through PATH manipulation
Security Advisory @ Mediaservice.net Srl 02, 19/04/2010 Data Security Division Title: sudoedit local privilege escalation through PATH manipulation Application: sudo = 1.7.2p5 Platform: Linux, maybe others Description: A local user with permission to run the sudoedit pseudo-command can gain root...
sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...
Sudo 1.7.2p5 Local Privilege Escalation
Security Advisory @ Mediaservice.net Srl 02, 19/04/2010 Data Security Division Title: sudoedit local privilege escalation through PATH manipulation Application: sudo Maurizio Agazzini Vendor Status: sudo team notified on 26/03/2010 CVE Candidate: The Common Vulnerabilities and Exposures project h...
Sudo sudoedit路径解析本地权限提升漏洞
BUGTRAQ ID: 39468 CVE ID: CVE-2010-1163 Sudo是一款允许用户以其他用户权限安全的执行命令的程序，广泛使用在Linux和Unix操作系统下。...
DEBIAN-CVE-2010-1163
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...
CVE-2010-1163: Improper Input Validation
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...
FreeBSD : sudo -- Privilege escalation with sudoedit (1a9f678d-48ca-11df-85f8-000c29a67389)
Todd Miller reports : Sudo's command matching routine expects actual commands to include one or more slash '/' characters. The flaw is that sudo's path resolution code did not add a './' prefix to commands found in the current working directory. This creates an ambiguity between a 'sudoedit'...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : sudo vulnerability (USN-928-1)
Valerio Costamagna discovered that sudo did not properly validate the path for the 'sudoedit' pseudo-command when the PATH contained only a dot '.'. If securepath and ignoredot were disabled, a local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the...
Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4
No description provided by source. !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage:...
(Tod Millers) SudoSudoEdit 1.6.9p211.7.2p4 - Local Privilege Escalation
Tod Millers SudoSudoEdit 1.6.9p211.7.2p4 - Local Privilege Escalation !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by...
(Tod Miller's) Sudo/SudoEdit 1.6.9p21/1.7.2p4 - Local Privilege Escalation
!/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage: ./sudoxpl.sh " exit fi cd /tmp cat...
Ubuntu Update for sudo vulnerabilities USN-905-1
Ubuntu Update for Linux kernel vulnerabilities USN-905-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9051.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for sudo vulnerabilities USN-905-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
FreeBSD : sudo -- Privilege escalation with sudoedit (018a84d0-2548-11df-b4a3-00e0815b8da8)
Todd Miller reports : When sudo performs its command matching, there is a special case for pseudo-commands in the sudoers file currently, the only pseudo-command is sudoedit. Unlike a regular command, pseudo-commands do not begin with a slash '/'. The flaw is that sudo's the matching code would...
sudo: sudoedit option can possibly allow for arbitrary code execution
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...
DEBIAN-CVE-2010-0426
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...