FreeBSD : FreeBSD -- Improper environment sanitization in rtld(1) (ad08d14b-ca3d-11df-aade-0050568f000c)

When running setuid programs rtld will normally remove potentially dangerous environment variables. Due to recent changes in FreeBSD environment variable handling code, a corrupt environment may result in attempts to unset environment variables failing. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 13 : sudo-1.7.2p6-2.fc13 (2010-9402)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 12 : sudo-1.7.2p6-2.fc12 (2010-9415)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-2062-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 17, 2010 http://www.debian.org/security/faq -...

DSA-2062-1 sudo - environment sanitization bypass

Bulletin has no description...

sudo security update

1.7.2p1-7 - added patch that fixes insufficient environment sanitization issue 598154 Resolves: 598381...

FreeBSD Security Advisory FreeBSD-SA-10:04.jail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:04.jail Security Advisory The FreeBSD Project Topic: Insufficient environment sanitization in jail8 Category: core Module: jail Announced: 2010-05-27 Credits:...

FreeBSD-SA-10:04.jail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:04.jail Security Advisory The FreeBSD Project Topic: Insufficient environment sanitization in jail8 Category: core Module: jail Announced: 2010-05-27 Credits:...

FreeBSD -- Insufficient environment sanitization in jail(8)

Problem Description: The jail8 utility does not change the current working directory while imprisoning. The current working directory can be accessed by its descendants...

FreeBSD Security Advisory FreeBSD-SA-09:16.rtld

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:16.rtld Security Advisory The FreeBSD Project Topic: Improper environment sanitization in rtld1 Category: core Module: rtld Announced: 2009-12-03 Affects:...

FreeBSD-SA-09:16.rtld

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:16.rtld Security Advisory The FreeBSD Project Topic: Improper environment sanitization in rtld1 Category: core Module: rtld Announced: 2009-12-03 Affects:...

CVE-1999-1586

CVE-1999-1586 describes a local privilege-escalation in SunOS 4.1.x where the loader path loadmodule , used by xnews, does not properly sanitize its environment. The underlying issue is inadequate environment handling, allowing local users to gain privileges. Affected product/component: SunOS 4.1...