CVE-2010-0426 PoC — Sudo sudoedit命令本地权限提升漏洞

Source

https://github.com/cved-sources/cve-2010-0426

Associated Vulnerability

Title: Sudo sudoedit命令本地权限提升漏洞 (CVE-2010-0426)
Description:sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

Description

cve-2010-0426

Readme

# CVE-2010-0426

This is part of Cved: *a tool to manage vulnerable docker containers.* 

Cved: https://github.com/git-rep-src/cved

Image source: https://github.com/cved-sources/cve-2010-0426

Image author: https://github.com/t0kx/privesc-CVE-2010-0426

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →