Skip to content
OpenAdvisories
Unscored DSA-596-2 1 CVE

sudo - missing input sanitising

Published Nov 24, 2004 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 sudo 1.6.6-1.3

Vulnerabilities 1

  • Unscored —

    sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to creat…