Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://queer.hacktivis.me/objects/e19348a0-6787-4534-9709-b161bf4fcea9">Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:14:07 JST</a><a href="https://queer.hacktivis.me/users/lanodan" title="lanodan@queer.hacktivis.me"><img src="https://gnusocial.jp/avatar/792-48-20230912093141.webp" width="48" height="48" alt="Haelwenn /элвэн/ :triskell:" style="position: absolute; left: 0; top: 0;">Haelwenn /элвэн/ :triskell:</a><div><a href="https://queer.hacktivis.me/objects/a788b1b2-94f3-43fc-be87-28ab55577ec9" rel="in-reply-to">in reply to</a><ul><li></ul></div></section><article>Details at <a href="https://www.sudo.ws/security/advisories/host_any/">https://www.sudo.ws/security/advisories/host_any/</a></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5280756#notice-10362768">In conversation</a><time datetime="2025-07-01T01:14:07+09:00" title="Tuesday, 01-Jul-2025 01:14:07 JST">about a year ago</time> <span>from <span><a href="https://gnusocial.jp/notice/10362768" rel="external" title="Sent from gnusocial.jp via ActivityPub">gnusocial.jp</a></span></span><a href="https://gnusocial.jp/notice/10362768">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.sudo.ws</div><h5><a href="https://www.sudo.ws/security/advisories/host_any/">Local Privilege Escalation via host option</a></h5><div></div></header><div>Sudo’s host (-h or --host) option is intended to be used in conjunction with the list option (-l or --list) to list a user’s sudo privileges on a host other than the current one. However, due to a bug it was not restricted to listing privileges and could be used when running a command via sudo or editing a file with sudoedit. Depending on the rules present in the sudoers file this could allow a local privilege escalation attack.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:14:07 JSTHaelwenn /элвэн/ :triskell:
in reply to
- Haelwenn /элвэн/ :triskell:
Details at https://www.sudo.ws/security/advisories/host_any/
In conversationabout a year ago from gnusocial.jppermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.sudo.ws
  Local Privilege Escalation via host option
  Sudo’s host (-h or --host) option is intended to be used in conjunction with the list option (-l or --list) to list a user’s sudo privileges on a host other than the current one. However, due to a bug it was not restricted to listing privileges and could be used when running a command via sudo or editing a file with sudoedit. Depending on the rules present in the sudoers file this could allow a local privilege escalation attack.

Public

Embed Notice

HTML Code

Corresponding Notice