Skip to content
OpenAdvisories
Unscored DSA-870-1 1 CVE

sudo - missing input sanitising

Published Oct 25, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 sudo 1.6.6-1.4
Debian · 3.1 sudo 1.6.8p7-1.2

Vulnerabilities 1

  • Unscored —

    Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPT…