Todd Miller Sudo vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in Todd Miller Sudo, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2010-1646debiansudo+3
EPSS score0.46%
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.CVE-2010-0427debiansudo+1EPSS score0.46%
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.CVE-2010-0426debiansudo+1EPSS score1.08%
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.CVE-1999-1496debiandebian_linux+2EPSS score0.51%
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.CVE-1999-0958todd_millersudoEPSS score0.43%
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.CVE-2004-1689debiansudo+1EPSS score1.17%
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.CVE-2004-1051debiansudo+7EPSS score1.37%
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.CVE-2002-0043todd_millersudoEPSS score0.93%
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.CVE-2006-0151debiansudo+2EPSS score0.61%
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.