ID de Prueba:	1.3.6.1.4.1.25623.1.0.884259
Categoría:	CentOS Local Security Checks
Título:	CentOS: Security Advisory for sudo (CESA-2023:0291)
Resumen:	The remote host is missing an update for the 'sudo'; package(s) announced via the CESA-2023:0291 advisory.
Descripción:	Summary: The remote host is missing an update for the 'sudo' package(s) announced via the CESA-2023:0291 advisory. Vulnerability Insight: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fix(es): * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'sudo' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-22809 Debian Security Information: DSA-5321 (Google Search) https://www.debian.org/security/2023/dsa-5321 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/ http://seclists.org/fulldisclosure/2023/Aug/21 https://security.gentoo.org/glsa/202305-12 http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html http://packetstormsecurity.com/files/172509/Sudoedit-Extra-Arguments-Privilege-Escalation.html http://packetstormsecurity.com/files/174234/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf https://lists.debian.org/debian-lts-announce/2023/01/msg00012.html http://www.openwall.com/lists/oss-security/2023/01/19/1
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.