Title : SUS 2.0.2 local root vulnerability Advisory ID : LSS#2004-09-01 Date : September 14th, 2004 Advisory URL: : http://security.lss.hr/index.php?page=deta...=LSS-2004-09-01 Impact : Any user can obtain root privileges Risk level : High Vulnerability type : Local Vendors contacted : GENTOO Linux and Peter D. Gray (SUS author), Contact date: September 13th, 2004
---
==[ Overview
SUS is a suid root program that allows ordinary users the execution of certain programs with superuser privileges. SUS relatives are super, sudo and calife. SUS is run by default as setuid root.
==[ Vulnerability
There is a very simple format string bug in log() function that allows any local user to gain root privileges. Format string vulnerability is a result of an incorrect syslog() function call, and can be exploited directly from the command line.
