Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

todd miller sudo 1.6.4 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2012-2337
sudo 1.6.x and 1.7.x prior to 1.7.9p1, and 1.8.x prior to 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4...
Todd Miller Sudo 1.6.2p3Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.8p12Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.6Todd Miller Sudo 1.6.9p21Todd Miller Sudo 1.6.9p22Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4p2Todd Miller Sudo 1.6.9Todd Miller Sudo 1.6.9p20Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.7Todd Miller Sudo 1.6.7p5Todd Miller Sudo 1.6.9p23Todd Miller Sudo 1.6
2.1
CVSSv2
CVE-2005-1119
Sudo VISudo 1.6.8 and previous versions allows local users to corrupt arbitrary files via a symlink attack on temporary files.
Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.7 P5Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.5Todd Miller Sudo 1.5.8Todd Miller Sudo 1.6Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.7Todd Miller Sudo 1.5.9
3.7
CVSSv2
CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Todd Miller Sudo 1.5.8Todd Miller Sudo 1.5.9Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.3.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.7 P5Todd Miller Sudo 1.6.8Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.8 P7
4.6
CVSSv2
CVE-2005-4158
Sudo prior to 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as librar...
Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.8 P5Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.7 P5Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.6Todd Miller Sudo 1.6.7Todd Miller Sudo 1.6.8 P9
4.6
CVSSv2
CVE-2005-2959
Incomplete blacklist vulnerability in sudo 1.6.8 and previous versions allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.
Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3p4Todd Miller Sudo 1.6.3p5Todd Miller Sudo 1.6.4p2Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.3p6Todd Miller Sudo 1.6.3p7Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.3p1Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.5p1
7.2
CVSSv2
CVE-2006-0151
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
Todd Miller Sudo 1.5.8Todd Miller Sudo 1.6Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.6Todd Miller Sudo 1.6.7Todd Miller Sudo 1.6.8 P7Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.5.9Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.8 P2Todd Miller Sudo 1.6.8 P5Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.4 P2
6.2
CVSSv2
CVE-2010-1646
The secure path feature in env.c in sudo 1.3.1 up to and including 1.6.9p22 and 1.7.0 up to and including 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH v...
Todd Miller Sudo 1.3.1Todd Miller Sudo 1.7.0Todd Miller Sudo 1.7.2p5Todd Miller Sudo 1.7.2p6Todd Miller Sudo 1.6.2p2Todd Miller Sudo 1.6.2p3Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3p7Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.7Todd Miller Sudo 1.6.7p1Todd Miller Sudo 1.6.8p3Todd Miller Sudo 1.6.8p4Todd Miller Sudo 1.6.8p11Todd Miller Sudo 1.6.8p12Todd Miller Sudo 1.6.9p6Todd Miller Sudo 1.6.9p7Todd Miller Sudo 1.6.9p15Todd Miller Sudo 1.6.9p16Todd Miller Sudo 1.7.2p1Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.6
4.4
CVSSv2
CVE-2013-2777
sudo prior to 1.7.10p5 and 1.8.x prior to 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session w...
Apple Mac Os XTodd Miller Sudo 1.7.9p1Todd Miller Sudo 1.7.9Todd Miller Sudo 1.7.6Todd Miller Sudo 1.7.5Todd Miller Sudo 1.7.4p6Todd Miller Sudo 1.7.3b1Todd Miller Sudo 1.7.2p7Todd Miller Sudo 1.7.1Todd Miller Sudo 1.6.4Todd Miller Sudo 1.7.10Todd Miller Sudo 1.7.6p2Todd Miller Sudo 1.7.6p1Todd Miller Sudo 1.7.4p1Todd Miller Sudo 1.7.4p4Todd Miller Sudo 1.7.2Todd Miller Sudo 1.7.2p1Todd Miller Sudo 1.6.9p20Todd Miller Sudo 1.6.9p21Todd Miller Sudo 1.6.7p5Todd Miller Sudo 1.6.8p12Todd Miller Sudo 1.7.10p1
4.4
CVSSv2
CVE-2013-1776
sudo 1.3.5 up to and including 1.7.10 and 1.8.0 up to and including 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vector...
Apple Mac Os XTodd Miller Sudo 1.8.1p2Todd Miller Sudo 1.8.2Todd Miller Sudo 1.8.4p4Todd Miller Sudo 1.8.4p5Todd Miller Sudo 1.8.3Todd Miller Sudo 1.8.3p1Todd Miller Sudo 1.8.3p2Todd Miller Sudo 1.8.5Todd Miller Sudo 1.8.0Todd Miller Sudo 1.8.4Todd Miller Sudo 1.8.4p1Todd Miller Sudo 1.8.1Todd Miller Sudo 1.8.1p1Todd Miller Sudo 1.8.4p2Todd Miller Sudo 1.8.4p3Todd Miller Sudo 1.7.8p1Todd Miller Sudo 1.7.8Todd Miller Sudo 1.7.4p2Todd Miller Sudo 1.7.4p3Todd Miller Sudo 1.7.4Todd Miller Sudo 1.7.2p4
4.4
CVSSv2
CVE-2013-2776
sudo 1.3.5 up to and including 1.7.10p5 and 1.8.0 up to and including 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissi...
Todd Miller Sudo 1.7.8p1Todd Miller Sudo 1.7.8Todd Miller Sudo 1.7.4p3Todd Miller Sudo 1.7.4Todd Miller Sudo 1.7.2p4Todd Miller Sudo 1.7.7Todd Miller Sudo 1.7.6p2Todd Miller Sudo 1.7.4p1Todd Miller Sudo 1.7.4p4Todd Miller Sudo 1.7.2p3Todd Miller Sudo 1.7.2Todd Miller Sudo 1.6.4p2Todd Miller Sudo 1.6.9p20Todd Miller Sudo 1.6.7p5Todd Miller Sudo 1.6.8p12Todd Miller Sudo 1.3.5Todd Miller Sudo 1.7.10Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.6.9p23Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.9p22Todd Miller Sudo 1.6.2p3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook