CVE - CVE-2019-19234

CVE-ID
CVE-2019-19234	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
DISPUTED In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes that this CVE is not valid. Disabling local password authentication for a user is not the same as disabling all access to that user--the user may still be able to login via other means (ssh key, kerberos, etc). Both the Linux shadow(5) and passwd(1) manuals are clear on this. Indeed it is a valid use case to have local accounts that are _only_ accessible via sudo and that cannot be logged into with a password. Sudo 1.8.30 added an optional setting to check the _shell_ of the target user (not the encrypted password!) against the contents of /etc/shells but that is not the same thing as preventing access to users with an invalid password hash.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://access.redhat.com/security/cve/cve-2019-19234 CONFIRM:https://security.netapp.com/advisory/ntap-20200103-0004/ CONFIRM:https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-19234 CONFIRM:https://www.oracle.com/security-alerts/bulletinapr2020.html CONFIRM:https://www.sudo.ws/devel.html#1.8.30b2 CONFIRM:https://www.suse.com/security/cve/CVE-2019-19234/ FEDORA:FEDORA-2020-7c1b270959 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ FEDORA:FEDORA-2020-8b563bc5f4 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58104 MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58473 MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58772 MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58812 MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58979 MISC:https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs60748 MISC:https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1018-5505 MISC:https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1019-3816 MISC:https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/12/warnmeldung_cb-k20-0001.html MISC:https://www.sudo.ws/stable.html MISC:https://www.tenable.com/plugins/nessus/132985
Assigning CNA
MITRE Corporation
Date Record Created
20191122	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20191122)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)