Path: csiph.com!weretis.net!feeder6.news.weretis.net!i2pn.org!rocksolid2!def5!.POSTED.bogusentry!not-for-mail From: Anonymous Newsgroups: rocksolid.shared.security Subject: Privilege escalation in sudo Date: Wed, 27 Jan 2021 08:14:35 -0800 Organization: def5 Message-ID: Content-Type: text/plain; charset=UTF-8 Injection-Info: def5.org; posting-host="bogusentry:192.168.1.189"; logging-data="32569"; mail-complaints-to="usenet@def5.org" Xref: csiph.com rocksolid.shared.security:72 "A serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user. It has been given the name Baron Samedit by its discoverer. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. User authentication is not required to exploit the bug. " https://www.sudo.ws/alerts/unescape_overflow.html Happy hacking. -- Posted on def2