CVE-2004-1689: todd_miller sudo

EPSS trend

Probability

1.17%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

0.00 pp

From 1.17% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocallinuxVerified
SudoEdit 1.6.8 - Local Change Permission
Maturity: weaponized

References

10 links

secunia.com/advisories/12596Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
marc.info?l=bugtraq&m=109537972929201&w=2Mailing ListX Refsource BUGTRAQ
www.kb.cert.org/vuls/id/424358Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.osvdb.org/10023VDB EntryX Refsource OSVDBPatchVendor Advisory
www.securityfocus.com/bid/11204VDB EntryX Refsource BIDExploitPatchVendor Advisory
www.ciac.org/ciac/bulletins/o-219.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/17424VDB EntryX Refsource XF
www.sudo.ws/sudo/alerts/sudoedit.htmlX Refsource CONFIRMPatchVendor Advisory
packetstormsecurity.nl/0409-exploits/sudoedit.txtX Refsource MISCPatchVendor Advisory
security-tracker.debian.org/tracker/CVE-2004-1689Advisory

Related vulnerabilities

CVE-2013-2777applemac_os_x+20.36%13y ago08-04-2013 17:00sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-2776applemac_os_x+20.37%13y ago08-04-2013 17:00sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-1776applemac_os_x+50.37%13y ago08-04-2013 17:00sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-1775applemac_os_x+23.18%13y ago04-03-2013 21:00sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.CVE-2014-0106applemac_os_x+40.34%12y ago11-03-2014 15:00Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.CVE-2005-1119debiansudo+10.36%21y ago16-04-2005 04:00Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

All vulnerabilities insudo

CVE-2004-1689: todd_miller sudo

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References