EDB-42183

PoC

Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation

view exploit source exploit_dbtype localauthor Qualys Corporationpublished 2017-06-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-1000367USmedium6.4Exploit
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and c…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan