Groups > rocksolid.shared.security > #72

Privilege escalation in sudo

Path	csiph.com!weretis.net!feeder6.news.weretis.net!i2pn.org!rocksolid2!def5!.POSTED.bogusentry!not-for-mail
From	Anonymous <poster@anon.com>
Newsgroups	rocksolid.shared.security
Subject	Privilege escalation in sudo
Date	Wed, 27 Jan 2021 08:14:35 -0800
Organization	def5
Message-ID	<opsec.772.3odeoq@anon.com> (permalink)
Content-Type	text/plain; charset=UTF-8
Injection-Info	def5.org; posting-host="bogusentry:192.168.1.189"; logging-data="32569"; mail-complaints-to="usenet@def5.org"
Xref	csiph.com rocksolid.shared.security:72

Show key headers only | View raw

"A serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user. It has been given the name Baron Samedit by its discoverer. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. User authentication is not required to exploit the bug. "

https://www.sudo.ws/alerts/unescape_overflow.html

Happy hacking.

-- 
Posted on def2

Back to rocksolid.shared.security | Previous | Next | Find similar | Unroll thread

Thread

Privilege escalation in sudo Anonymous <poster@anon.com> - 2021-01-27 08:14 -0800

csiph-web