13 matches found
VulnCheck KEV: CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
SUSE CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
SUSE CVE-2017-1000368
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...
Sudo get_process_ttyname Command Execution
The vulnerability of the getprocessttyname function in the Sudo system administration program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and gain access to sensitive information...
ALPINE-CVE-2017-1000368
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...
DEBIAN-CVE-2017-1000368
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...
DEBIAN-CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
Sudo get_process_ttyname Privilege Escalation
The vulnerability of the getprocessttyname function in the Sudo system administration program is related to insufficient input data validation. The vulnerability is exploited by creating a symbolic link to the executable file of Sudo, with the file name formatted in a specific way a space followe...
UBUNTU-CVE-2017-1000368
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...
PT-2017-2230
Name of the Vulnerable Software and Affected Versions sudo versions 1.8.20p1 and earlier Description The issue is related to insufficient input validation, specifically embedded newlines, in the get process ttyname function. This can result in information disclosure and command execution. A remot...
Sudo Input Validation Vulnerability
Sudo is a program developed by software developer Todd C. Miller for use on Unix-like operating systems that allows users to execute commands in a secure manner with special privileges. An input validation vulnerability exists in the 'getprocessttyname' function in Sudo 1.8.20 and earlier version...
UBUNTU-CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
PT-2017-2106
Name of the Vulnerable Software and Affected Versions sudo versions 1.8.20 and earlier Description The issue is related to insufficient input validation in the get process ttyname function, allowing for information disclosure and command execution. This can be exploited by creating a symbolic lin...