Sudo - i without password
Velko Kanev <[email protected]> Fri, 17 Sep 2021 21:52:26 +0300
| Newsgroups | gmane.comp.tools.sudo.user |
|---|---|
| Message-ID | <CANksZ+hgrv1wp0e0aVLR7WY7S77D6ZFcUn=YS2aMW7ma-KLn_Q@mail.gmail.com> |
Hello, I didn't know where to post my question. I' m working with devices with embedded custom build linux distro. What i found is pretty easy privilege escalation using "sudo-i" command. It never asks for password, just gives me root access ( switches user to "root"). I checket sudoers file in / etc/sudoers there is nothing like "NO PASSWORD" for root or any other user. There is no #include directive in the file neither. The group file also shows that avery user is in separate group. The user which i i initially have access with is "admin" but it is not part of root group. The question is why i gain access to root without knowing the root password and without password prompt? Have all the best! Velko Kanev ____________________________________________________________ sudo-users mailing list <[email protected]> For list information, options, or to unsubscribe, visit: https://www.sudo.ws/mailman/listinfo/sudo-users