Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv3

CVE-2002-0184

Published: 16/05/2002 Updated: 02/02/2024
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Sudo

Vulnerability Summary

Sudo prior to 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sudo project sudo

debian debian linux 2.2

Vendor Advisories

Debian Security Advisories: DSA-128-1 sudo -- buffer overflow
fc found a buffer overflow in the variable expansion code used by sudo for its prompt Since sudo is necessarily installed suid root a local user can use this to gain root access This has been fixed in version 162-22 for the stable distribution of Debian and version 166-1 for the testing/unstable distribution We recommend that you upgrade yo ...

Exploits

Exploit DB: Sudo 1.6.x - Password Prompt Heap Overflow
source: wwwsecurityfocuscom/bid/4593/info Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature The nature of the sudo utility requires that it be installed setuid root Successful exploitation may ...

References

CWE-131http://www.linuxsecurity.com/advisories/other_advisory-2040.htmlhttp://www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3http://www.debian.org/security/2002/dsa-128http://www.redhat.com/support/errata/RHSA-2002-071.htmlhttp://www.redhat.com/support/errata/RHSA-2002-072.htmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475http://www.novell.com/linux/security/advisories/2002_014_sudo_txt.htmlhttp://www.kb.cert.org/vuls/id/820083http://www.iss.net/security_center/static/8936.phphttp://www.securityfocus.com/bid/4593http://marc.info/?l=bugtraq&m=101979472822196&w=2http://marc.info/?l=bugtraq&m=101974610509912&w=2http://marc.info/?l=bugtraq&m=101975443619600&w=2http://marc.info/?l=bugtraq&m=102010164413135&w=2https://www.debian.org/security/./dsa-128https://nvd.nist.govhttps://www.exploit-db.com/exploits/21420/https://www.kb.cert.org/vuls/id/820083
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook