PT-2019-6480 · Sudo+2 · Sudo+2

Jan Lieskovsky · Published 2015-11-18 · Updated 2020-08-18 · CVE-2005-4890

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions shadow versions 4.0 through 4.1.4 sudo versions 1.0 through 1.7.3

Description The issue allows for a possible tty hijacking via "su - user -c program". This can be exploited by using the TIOCSTI ioctl to push characters into the input buffer, which can then be read by the next process, potentially allowing the user session to be escaped to the parent session.

Recommendations For shadow versions 4.0 through 4.1.4, update to version 4.1.5 or later. For sudo versions 1.0 through 1.7.3, update to version 1.7.4 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2015-2014

ALT-PU-2017-1056

CVE-2005-4890

Affected Products

Alt Linux

Shadow

Sudo

References · 64

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudo_password_bypass.rb · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2015-5602 · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2010-0426 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/02/25/6 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2337 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-2014 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06938 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1775 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4890 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5602 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646 · Security Note
• https://ubuntu.com/security/CVE-2005-4890 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2005-4890 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01940 · Security Note