Vulnerability Database
296,720
Total vulnerabilities in the database
CVE-2019-19519
In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c.
| Software | From | Fixed in |
|---|---|---|
| openbsd / openbsd | 6.6 | 6.6.x |
- http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2019/Dec/14
- http://www.openwall.com/lists/oss-security/2019/12/04/5
- https://github.com/openbsd/src/blob/2dfc98f42e117c7605b52b5020b630d98601dc22/usr.bin/su/su.c#L210-L211
- https://seclists.org/bugtraq/2019/Dec/8
- https://www.openbsd.org/errata66.html
- https://www.openwall.com/lists/oss-security/2019/12/04/5
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime