cve-bin-tool icon indicating copy to clipboard operation
cve-bin-tool copied to clipboard

New Checker: sudo

Open alt-glitch opened this issue 4 years ago • 2 comments

New Checker request: sudo Website: https://www.sudo.ws/ CVEs: https://www.cvedetails.com/vulnerability-list/vendor_id-118/product_id-200/; https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sudo

Note: I was wondering whether making a sudo checker is a viable option. Do let me know if it is. I'd like to submit a PR of a sudo checker :)

alt-glitch avatar Feb 16 '21 09:02 alt-glitch

it's worth a shot! I don't know offhand if sudo has any good version strings (I never do for any of the checkers we request until someone actually tries to build a signature) but there's no reason it shouldn't work if there's a viable signature. Let us know what you find!

terriko avatar Feb 17 '21 18:02 terriko

Just as an update for everyone for the sudo checker. The only common identifiable sudo version string is: image

This means that we need to be able to do pattern matching / regex over multiple lines to be able to match "Sudo version %s\n X.X.X"

alt-glitch avatar Mar 31 '21 08:03 alt-glitch

This issue should be closed now that #1259 has been merged

ffontaine avatar Jan 25 '23 13:01 ffontaine