Sploitus

Exploit for Improper Privilege Management in Sudo Project Sudo

CVE-2023-22809

githubexploit · 2023-06-20

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=794B399A-A606-5C17-8D0D-1E0C60296E14
# CVE-2023-22809  
Analysis & Exploit  

# Basic Information  
Vulnerability ID: CVE-2023-22809  
Vulnerability Severity: High  
Vulnerability Score: 7.8  
Affected Versions: sudo 1.8.0-sudo 1.9.12p1 (sudo >=1.8.0 or sudo <=1.9.12p1)  
Attack Effect: Local privilege escalation  

# Attack Method  
Modify the /etc/passwd file by setting root to a user name; see exp_passwd.sh.  
Modify the /etc/sudoers file by allowing user X to perform any operation without a password; see exp_sudoers.sh.