sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
References
Link | Resource |
---|---|
https://www.sudo.ws/alerts/noexec_bypass.html | |
https://bugzilla.redhat.com/show_bug.cgi?id=1372830 | Issue Tracking Third Party Advisory VDB Entry |
http://www.securityfocus.com/bid/95776 | Third Party Advisory VDB Entry |
http://rhn.redhat.com/errata/RHSA-2016-2872.html | |
https://usn.ubuntu.com/3968-3/ |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-04-14 11:59
Updated : 2020-09-30 11:15
NVD link : CVE-2016-7032
Mitre link : CVE-2016-7032
JSON object : View
CWE
CWE-284
Improper Access Control
Products Affected
todd_miller
- sudo