CVE-2012-2337: todd_miller sudo

Vulnerability summary

CVE-2012-2337 is a high (CVSS 7.2) vulnerability in todd_miller sudo. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.6% of scored vulnerabilities.

Timeline

1. 18-05-2012
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.