Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1051
HistoryMar 01, 2005 - 5:00 a.m.

CVE-2004-1051

2005-03-0105:00:00
[email protected]
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using “()” style environment variables to create functions that have the same name as any program within the bash script that is called without using the program’s full pathname.

Affected configurations

NVD
Node
mandrakesoftmandrake_multi_network_firewallMatch8.2
OR
todd_millersudoMatch1.5.6
OR
todd_millersudoMatch1.5.7
OR
todd_millersudoMatch1.5.8
OR
todd_millersudoMatch1.5.9
OR
todd_millersudoMatch1.6
OR
todd_millersudoMatch1.6.1
OR
todd_millersudoMatch1.6.2
OR
todd_millersudoMatch1.6.3
OR
todd_millersudoMatch1.6.3_p1
OR
todd_millersudoMatch1.6.3_p2
OR
todd_millersudoMatch1.6.3_p3
OR
todd_millersudoMatch1.6.3_p4
OR
todd_millersudoMatch1.6.3_p5
OR
todd_millersudoMatch1.6.3_p6
OR
todd_millersudoMatch1.6.3_p7
OR
todd_millersudoMatch1.6.4
OR
todd_millersudoMatch1.6.4_p1
OR
todd_millersudoMatch1.6.4_p2
OR
todd_millersudoMatch1.6.5
OR
todd_millersudoMatch1.6.5_p1
OR
todd_millersudoMatch1.6.5_p2
OR
todd_millersudoMatch1.6.6
OR
todd_millersudoMatch1.6.7
OR
todd_millersudoMatch1.6.8
OR
todd_millersudoMatch1.6.8_p1
Node
debiandebian_linuxMatch3.0alpha
OR
debiandebian_linuxMatch3.0arm
OR
debiandebian_linuxMatch3.0hppa
OR
debiandebian_linuxMatch3.0ia-32
OR
debiandebian_linuxMatch3.0ia-64
OR
debiandebian_linuxMatch3.0m68k
OR
debiandebian_linuxMatch3.0mips
OR
debiandebian_linuxMatch3.0mipsel
OR
debiandebian_linuxMatch3.0ppc
OR
debiandebian_linuxMatch3.0s-390
OR
debiandebian_linuxMatch3.0sparc
OR
mandrakesoftmandrake_linuxMatch9.2
OR
mandrakesoftmandrake_linuxMatch9.2amd64
OR
mandrakesoftmandrake_linuxMatch10.0
OR
mandrakesoftmandrake_linuxMatch10.0amd64
OR
mandrakesoftmandrake_linuxMatch10.1
OR
mandrakesoftmandrake_linuxMatch10.1x86_64
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64
OR
trustixsecure_linuxMatch1.5
OR
trustixsecure_linuxMatch2.0
OR
trustixsecure_linuxMatch2.1
OR
trustixsecure_linuxMatch2.2
OR
ubuntuubuntu_linuxMatch4.1ia64
OR
ubuntuubuntu_linuxMatch4.1ppc

Related

nessus 3
openvas 6
altlinux 3
debian 4
cvelist 1
debiancve 1
ubuntucve 1
osv 1
cve 1
nessus
nessus
Debian DSA-596-2 : sudo - missing input sanitising
2004-11-24 00:00:00
Mandrake Linux Security Advisory : sudo (MDKSA-2004:133)
2004-11-17 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2005-005)
2005-05-03 00:00:00
openvas
openvas
FreeBSD Ports: sudo
2008-09-04 00:00:00
Debian Security Advisory DSA 596-1 (sudo)
2008-01-17 00:00:00
Debian Security Advisory DSA 596-2 (sudo)
2008-01-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt4
2004-11-12 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.7p5-alt4
2004-11-12 00:00:00
Security fix for the ALT Linux 5 package sudo version 1:1.6.7p5-alt4
2004-11-12 00:00:00
debian
debian
[SECURITY] [DSA 596-2] New sudo packages removes debug output
2004-11-24 17:00:50
[SECURITY] [DSA 596-1] New sudo packages fix privilege escalation
2004-11-24 12:09:26
[SECURITY] [DSA 596-2] New sudo packages removes debug output
2004-11-24 17:00:50
cvelist
cvelist
CVE-2004-1051
2004-11-18 05:00:00
debiancve
debiancve
CVE-2004-1051
2005-03-01 05:00:00
ubuntucve
ubuntucve
CVE-2004-1051
2005-03-01 00:00:00
osv
osv
sudo - missing input sanitising
2004-11-24 00:00:00
cve
cve
CVE-2004-1051
2005-03-01 05:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON
Related for NVD:CVE-2004-1051
nessus3openvas6altlinux3debian4cvelist1debiancve1ubuntucve1osv1cve1