CVE-2005-2959
CVE-2005-2959
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.
EPSS 0,6% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
sudo Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.6.8p9-3
Actualiza a 1.6.8p9-3
sudo Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.6.8p9-3
Actualiza a 1.6.8p9-3
sudo Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.6.8p9-3
Actualiza a 1.6.8p9-3
Fuentes originales
- http://www.sudo.ws/bugs/show_bug.cgi?id=182
- http://secunia.com/advisories/17666
- http://secunia.com/advisories/18549
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:201
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
- http://docs.info.apple.com/article.html?artnum=305214
- http://www.debian.org/security/2005/dsa-870
- http://secunia.com/advisories/17322
- http://secunia.com/advisories/17390
- http://www.novell.com/linux/security/advisories/2006_02_sr.html
- http://www.securityfocus.com/bid/15191
- http://secunia.com/advisories/17345
- http://www.vupen.com/english/advisories/2007/0930
- http://secunia.com/advisories/17318
- https://usn.ubuntu.com/213-1/
- http://www.securityfocus.com/advisories/9643
- http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html
- http://secunia.com/advisories/24479
- https://nvd.nist.gov/vuln/detail/CVE-2005-2959