p PatchFirst

CVE-2008-3067

CVE-2008-3067

This page contains facts from public vulnerability sources. Check the original advisory before updating.

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.

EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • sudo Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.6.9p12-1

    Update to 1.6.9p12-1

  • sudo Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.6.9p12-1

    Update to 1.6.9p12-1

  • sudo Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.6.9p12-1

    Update to 1.6.9p12-1

Original sources

Check your server →