[security/article] New Linux SUDO flaw lets local users gain root privileges
1 message · started by Devi Garcia on Jan 27, 2021
[security/article] New Linux SUDO flaw lets local users gain root privileges
From Devi Garcia · Jan 27, 2021
A now-fixed Sudo vulnerability allowed any local user to gain root privileges on Unix-like operating systems without requiring authentication.
Sudo is a Unix program that enables system admins to provide limited root privileges to normal users listed in the sudoers file, while at the same time keeping a log of their activity.
It works on the Principle of Least Privilege where the program gives people just enough permissions to get their work done without compromising the system's overall security.
When executing commands on a Unix-like OS, unprivileged users can use the sudo (superuser do) command to execute commands as root if they have permission or know the root user's password - root is the system's superuser, a special system administration account.
Sudo can also be configured to permit normal users to run commands as any other user by including special directives to the sudoers configuration file.