BugTraq
Todd Miller Sudo local root exploit discovered by Slouching Mar 01 2010 11:08PM
Kingcope (kcope2 googlemail com) (1 replies)
Re: Todd Miller Sudo local root exploit discovered by Slouching Mar 03 2010 12:03PM
andy hotmail com (2 replies)
Re: Todd Miller Sudo local root exploit discovered by Slouching Mar 03 2010 07:13PM
Jann Horn (jannhorn googlemail com)
Am Mittwoch, den 03.03.2010, 12:03 +0000 schrieb andy (at) hotmail (dot) com [email concealed]:
> Hi Kingcope,
>
> ....but if the 'sudoers' file is correctly configured then you would not
> have the appropriate sudo permission to run the 'sudoedit' as root.
>
> ....of course I'm assuming that the 'sudoers' file has not got the 'run
> any command' in it.
>
> If the sudoers file used is even the default then I would think you would
> get some error on the lines of:
>
> 'Sorry, user is not allowed to execute './sudoedit test' as root on this
> machine'.
>
> Aren't you assuming the the sudoers file has a line in it that allows the
> user in question to run the /home/myhome/sudoedit as sudo???
>
> Or am I missing something?
>
> Andy

He's talking about a bug in sudo that allows him to run anything named
"sudoedit" if he can run commands that are in an alias named "sudoedit"
in /etc/sudoers.

Jann Horn

[ reply ]
Re: Todd Miller Sudo local root exploit discovered by Slouching Mar 03 2010 01:18PM
Kingcope (kcope2 googlemail com)


 

Privacy Statement
Copyright 2010, SecurityFocus