Skip to content
OpenAdvisories
Unscored DSA-946-2 2 CVEs

sudo - missing input sanitising

Published Apr 8, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 sudo 1.6.6-1.6
Debian · 3.1 sudo 1.6.8p7-1.4

Vulnerabilities 2

  • Unscored —
    CVE-2005-4158 Public exploit

    Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT …

    sudo Debian
  • Unscored —
    CVE-2006-0151

    sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users t…

    sudo Debian