CVE-2023-22809 PoC — Sudo 安全漏洞

Source

https://github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc

Associated Vulnerability

Title:Sudo 安全漏洞 (CVE-2023-22809)
Description:In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Description

A script to automate privilege escalation with CVE-2023-22809 vulnerability

Readme

# CVE-2023-22809

## sudo Privilege escalation

Affected sudo versions: 1.8.0 to 1.9.12p1 

This script automates the exploitation of the CVE-2023-22809 vulnerability to 
gain a root shell. 

The script checks if the current user has access to run the `sudoedit` or 
`sudo -e` command for some file with root privileges. If it does it opens the 
sudoers file for the attacker to introduce the privilege escalation policy 
for the current user and get a root shell.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!