USN-8895-1: Sudo vulnerability
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
Ubuntu security notice USN-8895-1 says Sudo incorrectly handles time-based sudoers restrictions when NOTBEFORE or NOTAFTER timestamps omit the trailing timezone indicator. A local attacker could potentially execute commands outside the intended window by manipulating the TZ environment variable. The notice does not name a CVE and does not say the issue is being exploited.
- Sudo mishandles NOTBEFORE and NOTAFTER timestamps that omit a timezone.
- A local user could change TZ to run commands outside the allowed window.
- USN-8895-1 names no CVE and does not report exploitation.
From the original article
It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local attacker could possibly use this issue to execute commands outside the intended time window by manipulating the TZ environment variable.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.