Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Awk sudo priv escalation vuln has wrong path for awk #316

Open
cliffe opened this issue Apr 17, 2024 · 2 comments
Open

Awk sudo priv escalation vuln has wrong path for awk #316

cliffe opened this issue Apr 17, 2024 · 2 comments

Comments

@cliffe
Copy link
Owner

cliffe commented Apr 17, 2024

Update to also include /usr/bin/awk

@cliffe
Copy link
Owner Author

cliffe commented Apr 17, 2024

Also update to allow any arguments:

 content => "ALL  ALL=(root) /usr/bin/awk *, /bin/awk *", 

@cliffe
Copy link
Owner Author

cliffe commented Apr 22, 2024

Update: it seems the system is still vulnerable, even with the wrong path specified (because the secure_path sudo setting includes /usr/sbin/). Although the fact that the specified path doesn't exist may cause some confusion.

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

1 participant