Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2023-22809 PoC — Sudo 安全漏洞

Source
Associated Vulnerability
Title:Sudo 安全漏洞 (CVE-2023-22809)
Description:In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.
Description
Running this exploit on a vulnerable system allows a local attacker to gain a root shell on the machine.
Readme
# CVE-2023-22809

**CVE-2023-22809** is a critical vulnerability that affects the popular sudo software, specifically the `sudoedit` command. This vulnerability allows an attacker to gain root privileges on a targeted system by exploiting a flaw present in the `sudoedit` command.

Exploiting the **CVE-2023-22809** vulnerability involves passing a specially crafted argument to the `sudoedit` command. This triggers the creation of a new file with root privileges. The attacker can then manipulate the content of this file, providing them with the ability to gain elevated privileges.

Key information about the **CVE-2023-22809** vulnerability includes:

- Severity: Critical
- Affected Product: sudo
- Affected Versions: 1.8.0 through 1.9.12.p1
- Patched Version: 1.9.12.p2
- Exploitability: Remote
- CVSS Score: 9.8

To execute the script that takes advantage of this vulnerability, use the following command:

```
python3 CVE-2023-22809.py
```

It is important to note that exploiting vulnerabilities without proper authorization is both illegal and unethical. This description is provided for educational and general awareness purposes only.
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →