Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
BID:24287
Info
Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
| Bugtraq ID: | 24287 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 04 2007 12:00AM |
| Updated: | Jun 04 2007 11:10PM |
| Credit: | Trent Waddington is credited with the discovery of this vulnerability. |
| Vulnerable: |
GratiSoft Sudo 1.6.8 p2 |
| Not Vulnerable: | |
Discussion
Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
The 'sudo' utility and the 'ptrace' call are prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary commands with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.
The 'sudo' utility and the 'ptrace' call are prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary commands with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.
Exploit / POC
Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
Todd Miller Sudo Ptrace API Local Privilege Escalation Vulnerability
References:
References:
- Sudo Homepage (Todd Miller)
- jumping sudo using ptrace on Linux/i386 ([email protected])