Lucene search
Ubuntu.comUB:CVE-2012-0809HistoryFeb 01, 2012 - 12:00 a.m.
CVE-2012-0809
2012-02-0100:00:00
ubuntu.com
ubuntu.com
13
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.7%
Format string vulnerability in the sudo_debug function in Sudo 1.8.0
through 1.8.3p1 allows local users to execute arbitrary code via format
string sequences in the program name for sudo.
Notes
| Author | Note |
|---|---|
| jdstrand | per upstream, introduced in 1.8, so only 12.04 affected -D_FORTIFY_SOURCE=2 in combination with ASLR and NX should adequately protect against this until an update is provided |
Related
fedora
fedora
[SECURITY] Fedora 16 Update: sudo-1.8.3p1-2.fc16
2012-01-31 22:00:15
[SECURITY] Fedora 16 Update: sudo-1.8.3p1-3.fc16
2012-07-12 18:56:05
nessus
nessus
Fedora 16 : sudo-1.8.3p1-2.fc16 (2012-1028)
2012-02-01 00:00:00
openSUSE Security Update : sudo (openSUSE-2012-73)
2014-06-13 00:00:00
freebsd
freebsd
sudo -- format string vulnerability
2012-01-30 00:00:00
openvas
openvas
FreeBSD Ports: sudo
2012-02-12 00:00:00
Fedora Update for sudo FEDORA-2012-1028
2012-04-02 00:00:00
Fedora Update for sudo FEDORA-2012-1028
2012-04-02 00:00:00
prion
prion
Format string
2012-02-01 00:55:00
cve
cve
CVE-2012-0809
2012-02-01 00:55:00
debiancve
debiancve
CVE-2012-0809
2012-02-01 00:55:00
seebug
seebug
sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE Bypass
2014-07-01 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2012-03-06 00:00:00
zdt
zdt
Sudo v1.8.0-1.8.3p1 (sudo_debug) - Root Exploit
2013-05-01 00:00:00
exploitpack
exploitpack
exploitdb
exploitdb
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.7%
Related for UB:CVE-2012-0809