CVE-2012-0809

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html
• archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt · Exploit
• security.gentoo.org/glsa/glsa-201203-06.xml
• sudo.ws/sudo/alerts/sudo_debug.html · Exploit

sudo のその他の脆弱性

• CVE-2016-7032高 7.0sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that…
• CVE-2014-0106中 6.6Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which all…
• CVE-2013-2777中 4.4sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal d…
• CVE-2013-2776中 4.4sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets opt…
• CVE-2013-1776中 4.4sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling termin…