CVE-2006-0151
CVE-2006-0151
This page contains facts from public vulnerability sources. Check the original advisory before updating.
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.trustix.org/errata/2006/0010
- http://secunia.com/advisories/18549
- http://secunia.com/advisories/18558
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822
- http://secunia.com/advisories/18363
- http://www.novell.com/linux/security/advisories/2006_02_sr.html
- http://secunia.com/advisories/18358
- http://www.securityfocus.com/bid/16184
- http://secunia.com/advisories/19016
- http://secunia.com/advisories/18906
- http://www.debian.org/security/2006/dsa-946
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:159
- https://usn.ubuntu.com/235-2/
- http://secunia.com/advisories/21692
- https://nvd.nist.gov/vuln/detail/CVE-2006-0151