sudo-1.8のバグ - てきとうなメモ

sudo-1.8のバグ - てきとうなメモ

Sudo format string vulnerability Sudo 1.8.0 introduced simple debugging support that was primaril...概要を表示 Sudo format string vulnerability Sudo 1.8.0 introduced simple debugging support that was primarily intended for use when developing policy or I/O logging plugins. The sudo_debug() function contains a flaw where the program name is used as part of the format string passed to the fprintf() function. The program name can be controlled by the caller, either via a symbolic link or, on some systems, by

• security