Todd Miller Sudo Luki w zabezpieczeniach

Wersja

1.6	8
1.5	8
1.6.1	6
1.6.2	6
1.6.3	6

Przeciwdziałanie

Official Fix	26
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	10

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	14
Unproven	2
Not Defined	20

Wektor dostępu

Not Defined	0
Physical	0
Local	32
Adjacent	4
Network	0

Uwierzytelnianie

Not Defined	0
High	2
Low	4
None	30

Interakcja z użytkownikiem

Not Defined	0
Required	0
None	36

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	6
≤7	4
≤8	8
≤9	12
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	8
≤7	8
≤8	10
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	10
≤7	2
≤8	8
≤9	12
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	0
≤7	0
≤8	0
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	2
<5k	4
<10k	4
<25k	26
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	26
<2k	6
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (107): 1.0, 1.1, 1.2, 1.3, 1.3.1, 1.4, 1.5, 1.5.2, 1.5.3, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3 P1, 1.6.3 P2, 1.6.3 P3, 1.6.3 P4, 1.6.3 P5, 1.6.3 P6, 1.6.3 P7, 1.6.3p1, 1.6.3p2, 1.6.3p3, 1.6.3p4, 1.6.3p5, 1.6.3p6, 1.6.3p7, 1.6.4, 1.6.4 P1, 1.6.4 P2, 1.6.4p1, 1.6.4p2, 1.6.5, 1.6.5 P1, 1.6.5 P2, 1.6.5p1, 1.6.5p2, 1.6.6, 1.6.7, 1.6.7 P5, 1.6.7p5, 1.6.8, 1.6.8 P1, 1.6.8 P2, 1.6.8 P5, 1.6.8 P7, 1.6.8 P8, 1.6.8 P9, 1.6.8 P12, 1.6.8p7, 1.6.8p12, 1.6.9, 1.6.9 P2, 1.6.9 P17, 1.6.9 P18, 1.6.9 P19, 1.6.9 P21, 1.6.9 P22, 1.6.9p2, 1.6.9p21, 1.6.9p22, 1.6.9p23, 1.7, 1.7.1, 1.7.2, 1.7.2p1, 1.7.2p2, 1.7.2p3, 1.7.2p4, 1.7.2p5, 1.7.2p6, 1.7.2p7, 1.7.3b1, 1.7.4, 1.7.4p1, 1.7.4p2, 1.7.4p3, 1.7.4p4, 1.8, 1.8.1, 1.8.1p1, 1.8.1p2, 1.8.2, 1.8.3, 1.8.3p1, 1.8.4, 1.8.5, 1.8.6, 1.8.6p6, 1.8.7, 1.8.8, 1.8.9, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.8.17, 1.8.18, 1.8.19, 1.8.20p1

Typ oprogramowania: Operating System Utility Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2017-06-05	6.9	6.8	Todd Miller sudo Newline get_process_ttyname privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-1000368
2017-05-30	7.1	6.4	Todd Miller sudo TTY get_process_ttyname race condition	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2017-1000367
2017-04-14	6.1	5.9	Todd Miller sudo sudo_noexec.so popen privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7032
2016-12-22	4.3	4.3	Todd Miller sudo readline information disclosure	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-7091
2015-07-28	7.8	7.0	Todd Miller sudo sudoedit sudoers privilege escalation	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.05	CVE-2015-5602
2015-02-22	4.6	4.3	Todd Miller sudo TZ Parser information disclosure	$5k-$25k	$0-$5k	Unproven	Official Fix	0.02	CVE-2014-9680
2014-03-05	5.9	5.2	Todd Miller sudo env.c validate_env_vars privilege escalation	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2014-0106
2013-04-08	5.9	5.7	Todd Miller sudo File Descriptors privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-2777
2013-04-08	5.9	5.9	Todd Miller sudo File Descriptors proc sysctl privilege escalation	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2013-2776
2013-02-27	5.3	5.1	Todd Miller sudo Authentication privilege escalation	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2013-1775

26 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 26 results.

więcej wpisów autorstwa Todd Miller

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!