[GoLUG] sudo vulnerability

Steve Litt slitt at troubleshooters.com
Tue Sep 30 19:45:55 EDT 2025


Read this description of a recently discovered vulnerability of the
sudo program:

https://thehackernews.com/2025/09/cisa-sounds-alarm-on-critical-sudo-flaw.html

So I took the following steps:

0) cd /usr/bin
1) zip sudo.zip sudo
2) rm sudo
3) create the following new /usr/bin/sudo:

============================================
#!/usr/bin/env ksh
echo "sudo has been removed due to a security flaw."
echo "The old sudo is contained in sudo.zip."
echo "Press Enter after reading to return 1"
read
exit 1
============================================

4) chmod a+x sudo

SteveT

Steve Litt 
http://444domains.com



More information about the GoLUG mailing list