Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

todd miller sudo 1.6.8p7 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2005-1831
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, s...
Todd Miller Sudo 1.6.8p7
6.9
CVSSv2
CVE-2010-1163
The command matching functionality in sudo 1.6.8 up to and including 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users ...
Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.8 P12Todd Miller Sudo 1.6.9 P17Todd Miller Sudo 1.6.9 P18Todd Miller Sudo 1.7.2p4Todd Miller Sudo 1.7.0Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.8 P9Todd Miller Sudo 1.6.8p7Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.7.2p3Todd Miller Sudo 1.6.8 P2Todd Miller Sudo 1.6.8 P5Todd Miller Sudo 1.6.9 P19Todd Miller Sudo 1.6.9 P20Todd Miller Sudo 1.6.9 P21Todd Miller Sudo 1.7.1Todd Miller Sudo 1.6.8 P7Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.6.9 P22Todd Miller Sudo 1.7.2p1
6.2
CVSSv2
CVE-2010-1646
The secure path feature in env.c in sudo 1.3.1 up to and including 1.6.9p22 and 1.7.0 up to and including 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH v...
Todd Miller Sudo 1.3.1Todd Miller Sudo 1.7.0Todd Miller Sudo 1.7.2p5Todd Miller Sudo 1.7.2p6Todd Miller Sudo 1.6.2p2Todd Miller Sudo 1.6.2p3Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3p7Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.7Todd Miller Sudo 1.6.7p1Todd Miller Sudo 1.6.8p3Todd Miller Sudo 1.6.8p4Todd Miller Sudo 1.6.8p11Todd Miller Sudo 1.6.8p12Todd Miller Sudo 1.6.9p6Todd Miller Sudo 1.6.9p7Todd Miller Sudo 1.6.9p15Todd Miller Sudo 1.6.9p16Todd Miller Sudo 1.7.2p1Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.6
4.6
CVSSv2
CVE-2005-2959
Incomplete blacklist vulnerability in sudo 1.6.8 and previous versions allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.
Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3p4Todd Miller Sudo 1.6.3p5Todd Miller Sudo 1.6.4p2Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.3p6Todd Miller Sudo 1.6.3p7Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.3p1Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.5p1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook