sudo upgrade fixes a potential vulnerability

New sudo packages are available to fix a security problem which may allow users to become root, or to execute arbitrary code as root. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Thu Apr 25 12:00:50 PDT 2002 patches/packages/sudo.tgz: Upgraded to sudo-1.6....

[Global InterSec 2002041701] Sudo Password Prompt Vulnerability.

Global InterSec LLC http://www.globalintersec.com GIS Advisory ID: 2002041701 Changed: 25/04/2002 Author: [email protected] Reference: http://www.globalintersec.com/adv/sudo-2002041701.txt Summary: Sudo - A popular utility for allowing users to execute commands as other users contains a...

Heap overflow in sudo

Heap overflow in -p switch processing...

PT-2002-1032 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo versions prior to 1.6.6 Description: The issue is caused by an off-by-one error that can result in a heap-based buffer overflow. This may allow local users to gain root privileges via special characters in the -p prompt argument, which a...

CVE-2002-0043

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked...

FreeBSD-SA-02:06.sudo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:06 Security Advisory FreeBSD, Inc. Topic: sudo port may enable local privilege escalation Category: ports Module: sudo Announced: 2002-01-16 Credits: Sebastian Krahmer...

SuSE Security Announcement: sudo (SuSE-SA:2002:002)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: sudo Announcement-ID: SuSE-SA:2002:002 Date: Mon Jan 14 13:00:00 CET 2002 Affected SuSE versions: 7.0, 7.1, 7.2, 7.3 Vulnerability Type: local privilege escalation Severity 1-10: 5 SuSE default package: yes Other affected...

[SECURITY] [DSA 101-1] New sudo packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 101-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2002 - -------------------------------------------------------------------------- Package : sudo...

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation

source: https://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some circumstances, sudo does not properly sanitize the environment it...

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation source: https://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some...

Sudo 1.6.x - Password Prompt Heap Overflow

Sudo 1.6.x - Password Prompt Heap Overflow // source: https://www.securityfocus.com/bid/4593/info Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users. Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature. The...

Sudo 1.6.x - Password Prompt Heap Overflow

// source: https://www.securityfocus.com/bid/4593/info Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users. Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature. The nature of the sudo utility requires that i...

CVE-1999-1496

CVE-1999-1496 affects Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 . Local users can infer the existence of arbitrary files by attempting to execute the target filename as a program, which yields different error messages depending on whether the file exists. This indicates a minor information-dis...

CVE-1999-1496

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist...

Переполнение буфера в sudo (buffer overflow)

Переполнение буфера...

[synnergy] - Sudo Vudo

Vudo - An object superstitiously believed to embody magical powers - -------------- Michel "MaXX" Kaempf [email protected] -------------- ---------------- Copyright C 2001 Synnergy Networks ---------------- -- 0x00 - Introduction ----------------------------------------------- Sudo superuser do...

CVE-2001-0279

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...

CVE-2001-0279

The CVE-2001-0279 entry concerns a buffer overflow in sudo prior to version 1.6.3p6 that could allow a local user to gain root privileges. Multiple connected advisories confirm this vulnerability and reference updating to a fixed package (e.g., 1.6.3p6 or newer) as the remedy. Affected documents ...

CVE-2001-0279

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges...

FreeBSD-SA-01:38.sudo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:38 Security Advisory FreeBSD, Inc. Topic: sudo contains local buffer overflow Category: ports Module: sudo Announced: 2001-04-23 Credits: Chris Wilson Affects: Ports...