PT-2020-12219 · Mx Linux+2 · Mx Linux+2

Published 2020-03-14 · Updated 2021-07-21 · CVE-2020-10587

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions antiX (affected versions not specified) MX Linux (affected versions not specified)

Description The issue allows local users to achieve root access via "persist-config --command /bin/sh" due to the Sudo configuration.

Recommendations For antiX, update the Sudo configuration to prevent unauthorized access. For MX Linux, update the Sudo configuration to prevent unauthorized access. As a temporary workaround, consider restricting the use of the persist-config command until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-10587

Affected Products

Mx Linux

Sudo

Antix

References · 4

• 🔥 https://gist.github.com/bash-c/d2055b5047e56a0b49c95b461347c619#file-antix-exp-sh · Exploit
• 🔥 https://gist.github.com/bash-c/d2055b5047e56a0b49c95b461347c619#file-mx-exp-sh · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-10587 · Security Note
• https://t.me/cvenotify/1697 · Telegram Post