CVE:CVE-2016-7091
CNNVD:CNNVD-201608-468
Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。
多款Red Hat产品中的sudo默认配置存在安全漏洞。攻击者可借助提升地权限利用该漏洞读取特定格式文件的内容。以下产品受到影响：Red Hat Enterprise Linux Desktop (v. 7)；HPC Node (v. 7)；Server (v. 7)；Workstation (v. 7)。
solution:Upgrade redhat enterprise_linux to a higher version than *; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0