Forgot your password?
typodupeerror
Unix

+ - Sudo Authentication bypass Vulnerability Emerges->

Submitted by hypnosec
hypnosec (2231454) writes "A new vulnerability has been discovered in sudo whereby protection offered by the utility can be bypassed to execute commands which are otherwise only executable through sudo along with the correct password. If a few prerequisites are met; the sudo timestamp is reset using sudo -k; and system time clock is set to epoch the user can execute commands without having to enter password again. The Sudo versions that are affected by this vulnerability are 1.6.0 through to 1.7.10p6; 1.8.0 through to 1.8.6p6. Versions where the vulnerability is fixed have already been made available – 1.7.10p7 and 1.8.6p7."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Sudo Authentication bypass Vulnerability Emerges

Comments Filter:

"Consequences, Schmonsequences, as long as I'm rich." -- "Ali Baba Bunny" [1957, Chuck Jones]

Working...