关联漏洞
标题：
Sudo 安全漏洞
(CVE-2025-32463)
描述：Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p1之前版本存在安全漏洞，该漏洞源于使用用户控制目录中的/etc/nsswitch.conf可能导致获取root访问权限。
介绍
# CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab
This repository contains a Docker-based lab and proof-of-concept exploit for [CVE-2025-32463](https://www.sudo.ws/security/advisories/chroot_bug), a local privilege escalation vulnerability in `sudo` (versions 1.9.14 to 1.9.17).
## 🚨 Disclaimer
This code is for educational and authorized testing purposes only. Do not use on systems you do not own or have explicit permission to test.
## Lab Features
- Vulnerable Ubuntu 24.04 container with `sudo` 1.9.15p5
- Non-privileged user (`labuser`)
- Exploit script: `sudo-chwoot.sh`
- Dockerfile for easy setup
## Quick Start
```bash
git clone https://github.com/adonijah01/cve-2025-32463-lab.git
cd cve-2025-32463-lab
docker build -t cve-2025-32463-lab .
docker run --rm -it --privileged cve-2025-32463-lab
```
Inside the container:
```bash
cd ~
./sudo-chwoot.sh
```
## Exploit Overview
The exploit abuses the `--chroot` option in sudo and a crafted `nsswitch.conf` to load a malicious NSS module, resulting in root shell access.
## Reference
- [Sudo Security Advisory](https://www.sudo.ws/security/advisories/chroot_bug)
- [CVE-2025-32463 in the CVE database](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32463)
- [Stratascale Advisory](https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot) - Original research and PoC concept
## Credits
Exploit concept and vulnerability details referenced from the official Sudo advisory, CVE database, and [Stratascale's research](https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot).
Stay safe and use responsibly!
文件快照
[4.0K] /data/pocs/95ea84ad902f46a05f754610490dd96f658ce493
├── [ 580] Dockerfile
├── [1.6K] README.md
└── [ 652] sudo-chwoot.sh
0 directories, 3 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。