CVE-2019-14287 PoC — Sudo 输入验证错误漏洞

Source

https://github.com/n0w4n/CVE-2019-14287

Associated Vulnerability

Title:Sudo 输入验证错误漏洞 (CVE-2019-14287)
Description:In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.

Description

Sudo exploit

Readme

# CVE-2019-14287

A script to check for the sudo security bypass (CVE-2019-14287).
This script checks for a vulnerable sudo version and tries to exploit it.

It can run alone or can be integrated into a enumeration scanner like LinEnum.sh.

[![asciicast](https://asciinema.org/a/cKtVDxxrk7KOffw4N2xwi6TPM.svg)](https://asciinema.org/a/cKtVDxxrk7KOffw4N2xwi6TPM)

File Snapshot


 [4.0K]  /data/pocs/8e95bd5cfdaae60a27bd614a43349ea7e223da00
├── [ 34K]  LICENSE
├── [ 362]  README.md
└── [1.1K]  sudo.sh

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!