Vulnerability Bulletins |
DSA-4543 sudo - security update |
|
| Affected software | Debian |
|
Joe Vennix discovered that sudo, a program designed to provide limitedsuper user privileges to specific users, when configured to allow a userto run commands as an arbitrary user via the ALL keyword in a Runasspecification, allows to run commands as root by specifying the user ID-1 or 4294967295. This could allow a user with sufficient sudoprivileges to run commands as root even if the Runas specificationexplicitly disallows root access. More info: https://www.debian.org/security/2019/dsa-4543 |
|