Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Todd Miller Sudo 本地安全绕过漏洞
Vulnerability Description
Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。 Todd Miller ‘sudo’中存在本地安全绕过漏洞。攻击者利用该漏洞绕过一定的安全限制进而执行未授权操作。‘sudo’ 1.3.5至1.7.10p6版本以及1.8.0至1.8.6p7版本中存在漏洞。成功的利用此漏洞需要开启‘tty_tickets’选项。
CVSS Information
N/A
Vulnerability Type
N/A