[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2017-1000367

Date: (C)2017-06-06   (M)2017-08-14
 
CVSS Score: 6.9Access Vector: LOCAL
Exploitability Subscore: 3.4Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.

Reference:
SECTRACK-1038582
http://seclists.org/fulldisclosure/2017/Jun/3
EXPLOIT-DB-42183
BID-98745
DSA-3867
FEDORA-2017-54580efa82
GLSA-201705-15
RHSA-2017:1381
SUSE-SU-2017:1446
SUSE-SU-2017:1450
USN-3304-1
http://www.openwall.com/lists/oss-security/2017/05/30/16
http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html
https://www.sudo.ws/alerts/linux_tty.html
openSUSE-SU-2017:1455

CWE    1
CWE-20
OVAL    16
oval:org.secpod.oval:def:1501903
oval:org.secpod.oval:def:602910
oval:org.secpod.oval:def:112437
oval:org.secpod.oval:def:502045
...

© 2013 SecPod Technologies