Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Gentoo: GLSA-200409-17 High: Local Privilege Escalation in SUS

gentoo
Calendar Grey September 14, 2004
Scroller Gentoo
Gentoo Linux Advisory GLSA 202310-14 highlights a critical flaw in the SSHD daemon; immediate patching advised.
SUS contains a string format bug that could lead to local privilege escalation.

Summary

Gentoo Linux Security Advisory GLSA 200409-17 https://security.gentoo.org/ Severity: High Title: SUS: Local root vulnerability Date: September 14, 2004 Bugs: #63927 ID: 200409-17

Synopsis ======= SUS contains a string format bug that could lead to local privilege escalation.
Background ========= SUS is a utility that allows regular users to be able to execute certain commands as root.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/sus < 2.0.2-r1 >= 2.0.2-r1
========== Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log() function due to an...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo root access local escalation string format sus

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo root access local escalation string format sus

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround