CVE-2015-5602 PoC — Sudo sudoedit 安全漏洞

Source

https://github.com/cved-sources/cve-2015-5602

Associated Vulnerability

Title:Sudo sudoedit 安全漏洞 (CVE-2015-5602)
Description:Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.8.15之前版本的sudoedit中存在安全漏洞，该漏洞源于当重复使用通配符时程序没有检查完整路径。本地攻击者可通过实施符号链接攻击利用该漏洞获取权限。

Description

cve-2015-5602

Readme

# CVE-2015-5602

This is part of Cved: *a tool to manage vulnerable docker containers.* 

Cved: https://github.com/git-rep-src/cved

Image source: https://github.com/cved-sources/cve-2015-5602

Image author: https://github.com/t0kx/privesc-CVE-2015-5602

File Snapshot


 [4.0K]  /data/pocs/d303045e863df8e67ac02dbb69fc769dff7231b6
├── [ 758]  Dockerfile
└── [ 254]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!