Article 5DNYJ [$] A major vulnerability in Sudo

[$] A major vulnerability in Sudo

by
jake
from LWN.net on (#5DNYJ)
A longstanding hole in the Sudoprivilege-delegation tool that was discoveredin late January is a potent local vulnerability. Exploiting it allows local usersto run code of their choosing as root by way of a bog-standard heap-bufferoverflow. It seems like the kind of bug that might have been found earlier viacode inspection or fuzzing, but it has remained in this security-sensitiveutility since it was introduced in 2011.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments