It has been reported that a vulnerability has been discovered in the Sudo (super user do) command for Linux. Exploiting this vulnerability allows unprivileged users or programs to execute commands with superuser rights. It is noted that the vulnerability affects systems with non-standard configurations and does not impact most servers running Linux.
The vulnerability arises when Sudo configuration settings are used that allow executing commands on behalf of other users. Additionally, Sudo can be configured in such a way that commands can be executed on behalf of other users, except for the superuser. This requires making appropriate adjustments to the configuration file.
The core of the problem lies in how Sudo handles user identifiers. If you enter the user ID -1 or its equivalent 4294967295 in the command line, the executed command may run with superuser privileges. Since the specified user identifiers do not appear in the password database, no password will be required to execute the command.
To reduce the likelihood of issues related to this vulnerability, users are recommended to update Sudo to version 1.8.28 or later as soon as possible. The announcement states that in the new version of Sudo, the parameter -1 is no longer used as a user identifier. This means that malicious actors will not be able to exploit this vulnerability.
Source: 3dnews.ru
