Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sudo 安全漏洞
Vulnerability Description
Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.8.12之前的版本中存在安全漏洞，该漏洞源于程序没有确定TZ环境变量是否与zoneinfo文件有关联。本地攻击者可通过在sudo会话中运行程序利用该漏洞打开任意文件。
CVSS Information
N/A
Vulnerability Type
N/A