Description
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Sudo 1.5/1.6 - Heap Corruption EDB-20901 · local · Feb 22, 2001 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- RHSA-2001:018 vendor-advisory
- 20010222 Sudo version 1.6.3p6 now available (fwd) mailing-list
- MDKSA-2001:024 vendor-advisory
- 20010225 [slackware-security] buffer overflow in sudo fixed mailing-list
- DSA-031 vendor-advisory
- 20010226 Trustix Security Advisory - sudo mailing-list
- CLA-2001:381 vendor-advisory
- RHSA-2001:019 vendor-advisory