Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sudo和shadow 输入验证错误漏洞
Vulnerability Description
Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。shadow是一套用于维护Debian系统的工具套件。 shadow 4.1.5之前的4.x版本和sudo1.7.4之前的1.x版本中存在安全漏洞。攻击者可利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A