sudo

49 results · Feed

• Unscored —
  CVE-2009-0034

  parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file d…

  sudo Debian
  Jan 30, 2009
• Unscored —
  CVE-2008-3067

  sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users…

  sudo Debian
  Jul 7, 2008
• Unscored —
  CVE-2006-0151

  sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users t…

  sudo Debian
  Jan 9, 2006
• Unscored —
  CVE-2005-4158 Public exploit

  Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT …

  sudo Debian
  Dec 11, 2005
• Unscored —
  CVE-2005-2959

  Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPT…

  sudo Debian
  Oct 25, 2005
• Unscored —
  CVE-2005-1993

  Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file,…

  sudo Debian
  Jun 20, 2005
• Unscored —
  CVE-2005-1119

  Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

  sudo Debian
  Apr 16, 2005
• Unscored —
  CVE-2004-1689 Public exploit

  sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbi…

  sudo Debian
  Feb 20, 2005
• Unscored —
  CVE-2004-1051

  sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to creat…

  sudo Debian
  Nov 18, 2004