Поиск уязвимостей
Количество 9
Количество 9
CVE-2019-19232
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions
CVE-2019-19232
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions
CVE-2019-19232
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions
CVE-2019-19232
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer ...
GHSA-g292-5fg6-fchh
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user.
ELSA-2020-1804
ELSA-2020-1804: sudo security, bug fix, and enhancement update (MODERATE)
BDU:2020-00857
Уязвимость учетной записи sudoer в файле Runas ALL программы системного администрирования Sudo, позволяющая нарушителю выдать себя за несуществующего пользователя
ALT-PU-2020-2707
ALT-PU-2020-2707: package `sudo` update to version 1.8.31p2-alt1
ALT-PU-2021-1164
ALT-PU-2021-1164: package `sudo` update to version 1.9.5p2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-19232 In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
 | CVE-2019-19232 In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
 | CVE-2019-19232 In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| CVE-2019-19232 In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer ... | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| GHSA-g292-5fg6-fchh In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
| ELSA-2020-1804 ELSA-2020-1804: sudo security, bug fix, and enhancement update (MODERATE) | 3% Низкий | больше 6 лет назад | |
 | BDU:2020-00857 Уязвимость учетной записи sudoer в файле Runas ALL программы системного администрирования Sudo, позволяющая нарушителю выдать себя за несуществующего пользователя | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| ALT-PU-2020-2707 ALT-PU-2020-2707: package `sudo` update to version 1.8.31p2-alt1 | CVSS3: 7.8 | около 6 лет назад | |
| ALT-PU-2021-1164 ALT-PU-2021-1164: package `sudo` update to version 1.9.5p2-alt1 | CVSS3: 7.8 | почти 6 лет назад |
Уязвимостей на страницу