CVE-2023-22809 PoC — Sudo 安全漏洞

Source

https://github.com/M4fiaB0y/CVE-2023-22809

Associated Vulnerability

Title:Sudo 安全漏洞 (CVE-2023-22809)
Description:Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 1.9.12p2 之前的 Sudo存在安全漏洞，该漏洞源于sudoedit（又名 -e）功能错误处理用户提供的环境变量（SUDO_EDITOR、VISUAL 和 EDITOR）中传递的额外参数，从而允许本地攻击者将任意条目附加到要处理的文件列表中 . 这可能导致特权升级。

Readme

# CVE-2023-22809
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22809
## Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation
 
## Exploit Author: n3m1.sys
### CVE: CVE-2023-22809
### Date: 2023/01/21
### Vendor Homepage: https://www.sudo.ws/
### Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz
### Version: 1.8.0 to 1.9.12p1
### Tested on: Ubuntu Server 22.04 - vim 8.2.4919 - sudo 1.9.9
###
### Running this exploit on a vulnerable system allows a localiattacker to gain 
### a root shell on the machine.
###
### The exploit checks if the current user has privileges to run sudoedit or 
### sudo -e on a file as root. If so it will open the sudoers file for the
### attacker to add a line to gain privileges on all the files and get a root 
### shell.

File Snapshot


 [4.0K]  /data/pocs/8ebfeb01512c65ec8c94c273c99d2b21d43dda62
├── [1.1K]  exploit.sh
└── [ 788]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!