Sudo screen command might be vulnerable to privilege escalation (PrivEsc)
Last updated 1 year ago
.
sudo -l (root) /usr/bin/screen -r testsession Copied!
If we can execute "screen" command as root, we can spawn a root shell from the screen session.
First execute "screen" command as root, then a screen session will be start. Now we can spawn a root shell by pressing “Ctrl+a+c” in the screen session.