Heap-based buffer overflow in Sudo

Re:Heap-based buffer overflow in Sudo by Someone on Wednesday January 27, 2021 @03:26AM (#25925659)

No, you can’t. I think the blame shouldn’t be on this author, but on those choosing to install it or, worse, choosing to ship it on their OS.

OpenBSD replaced sudo with doas (http://man.openbsd.org/doas) in 2016 (https://www.infoworld.com/article/3099038/openbsd-60-tighten...). It’s a safe bet it’s more secure than sudo.

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by greggyb on Wednesday January 27, 2021 @10:59AM (#25929834)

Sudo was (maybe still is?) an OpenBSD project. I don't believe it originated there, but their code forms/formed the basis for sudo pretty much everywhere, much like OpenSSH.

[ Parent | on HN ]

Re:Heap-based buffer overflow in Sudo by JoachimS on Wednesday January 27, 2021 @09:45AM (#25928830)

doas is a a really good replacement.

[ Parent | on HN ]