CVE-2005-2959

Related Files

sudo168p10.sh.txt

Posted Nov 10, 2005

Authored by breno

Local root exploit for sudo versions below 1.6.8p10 that makes use of the environment cleaning flaws with the SHELLOPTS and PS4 variables.

tags | exploit, local, root

advisories | CVE-2005-2959

SHA-256 | 01540d7b6b0b6ee45a0878ef444900d18cdc75c2444c243cfc128279fd8df1b5

Download | Favorite | View

Ubuntu Security Notice 213-1

Posted Nov 1, 2005

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-213-1 - Tavis Ormandy discovered a privilege escalation vulnerability in sudo. On executing shell scripts with sudo, the P4 and SHELLOPTS environment variables were not cleaned properly. If sudo is set up to grant limited sudo privileges to normal users this could be exploited to run arbitrary commands as the target user.

tags | advisory, arbitrary, shell

systems | linux, ubuntu

advisories | CVE-2005-2959

SHA-256 | edc8f0c244d39ceb41c3da1b77060c73e66a52308b7156971890553733a48bb9

Download | Favorite | View