CVE-2017-1000367
MEDIUM EXPLOITEDTodd Miller's sudo <1.8.20 - Info Disclosure & Command Execution
Title source: llmExploitation Summary
CVE-2017-1000367 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 5 public exploits from researchers including Qualys Corporation, c0d3z3r0, pucerpocok.
AI-analyzed exploit summary This exploit leverages a race condition in sudo (CVE-2017-1000367) to achieve local privilege escalation by manipulating symlinks and inotify events. It creates a controlled environment to trick sudo into executing arbitrary commands with elevated privileges.
Description
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Exploits (5)
This exploit leverages a race condition in sudo (CVE-2017-1000367) to achieve local privilege escalation by manipulating symlinks and inotify events. It creates a controlled environment to trick sudo into executing arbitrary commands with elevated privileges.
This repository contains a functional exploit for CVE-2017-1000367, a Linux Sudo vulnerability involving a race condition in SELinux role validation. The exploit uses symlink manipulation and process scheduling to bypass restrictions and achieve privilege escalation.
This repository contains a functional Python exploit for CVE-2017-1000367, a sudo privilege escalation vulnerability. The exploit leverages a race condition in sudo's handling of TTY devices to gain root privileges by manipulating symbolic links and file descriptors.
The repository contains a functional exploit for CVE-2017-1000367, leveraging a race condition in Sudo's get_process_ttyname() function to achieve local privilege escalation by manipulating symlinks and tty device paths.
This exploit leverages a race condition in sudo (CVE-2017-1000367) by manipulating symlinks and process timing to achieve local privilege escalation. It uses inotify to monitor file access and swaps symlinks to trick sudo into executing arbitrary commands with elevated privileges.
References (18)
Scores
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H