[GoLUG] sudo vulnerability
Steve Litt
slitt at troubleshooters.com
Tue Sep 30 19:45:55 EDT 2025
Read this description of a recently discovered vulnerability of the
sudo program:
https://thehackernews.com/2025/09/cisa-sounds-alarm-on-critical-sudo-flaw.html
So I took the following steps:
0) cd /usr/bin
1) zip sudo.zip sudo
2) rm sudo
3) create the following new /usr/bin/sudo:
============================================
#!/usr/bin/env ksh
echo "sudo has been removed due to a security flaw."
echo "The old sudo is contained in sudo.zip."
echo "Press Enter after reading to return 1"
read
exit 1
============================================
4) chmod a+x sudo
SteveT
Steve Litt
http://444domains.com
More information about the GoLUG
mailing list