Posts Tagged ‘sudo vulnerability’
sudo authentication bypass when clock is reset
A recent discovery by a German researcher, Marco Schoepl, found that it is possible for a user to bypass sudo authentication by resetting the clock. To read more about this vulnerability see the articles on seclist.org and threatpost.com. What we have found is that many highly secure customers have already adopted the timestamp_timeout=0 setting which…
Post by Rod Simmons
March 7, 2013
