CVE-2012-2337
CVE-2012-2337
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
sudo Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.8.3p2-1.1
Actualiza a 1.8.3p2-1.1
sudo Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.8.3p2-1.1
Actualiza a 1.8.3p2-1.1
sudo Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.8.3p2-1.1
Actualiza a 1.8.3p2-1.1
Fuentes originales
- https://bugzilla.redhat.com/show_bug.cgi?id=820677
- http://secunia.com/advisories/49219
- http://secunia.com/advisories/49948
- http://secunia.com/advisories/49244
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:079
- http://secunia.com/advisories/49291
- http://www.debian.org/security/2012/dsa-2478
- http://www.securitytracker.com/id?1027077
- https://www.suse.com/security/cve/CVE-2012-2337/
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081432.html
- http://www.sudo.ws/sudo/alerts/netmask.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-2337