CVSS: 7.8EPSS: 0%CPEs: 47EXPL: 2CVE-2007-4305 – Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities
https://notcve.org/view.php?id=CVE-2007-4305
13 Aug 2007 — Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing. Múltiples condiciones de carrera en (1) el modo monitor de Sudo Y (2) políticas Sysjail en Systrace de NetBSD y OpenBSD permiten a usuarios locales vencer la interposición en llamadas al sistema, y por tanto evitar la política de control de acceso y monitorización. • https://www.exploit-db.com/exploits/30484 •
CVSS: 7.8EPSS: 0%CPEs: 40EXPL: 1CVE-2006-0151
https://notcve.org/view.php?id=CVE-2006-0151
09 Jan 2006 — sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158. • http://secunia.com/advisories/18358 •
CVSS: 7.8EPSS: 0%CPEs: 30EXPL: 4CVE-2005-4158 – Sudo 1.6.x - Environment Variable Handling Security Bypass
https://notcve.org/view.php?id=CVE-2005-4158
11 Dec 2005 — Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script. • https://www.exploit-db.com/exploits/27056 •
CVSS: 7.0EPSS: 0%CPEs: 29EXPL: 0CVE-2005-1993
https://notcve.org/view.php?id=CVE-2005-1993
20 Jun 2005 — Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. • http://docs.info.apple.com/article.html?artnum=302847 •
CVSS: 5.5EPSS: 0%CPEs: 27EXPL: 0CVE-2005-1119
https://notcve.org/view.php?id=CVE-2005-1119
16 Apr 2005 — Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files. • http://www.securityfocus.com/bid/13171 •
CVSS: 7.8EPSS: 0%CPEs: 51EXPL: 0CVE-2004-1051
https://notcve.org/view.php?id=CVE-2004-1051
18 Nov 2004 — sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname. • http://lists.apple.com/archives/security-announce/2005/May/msg00001.html •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2002-0184 – Sudo 1.6.x - Password Prompt Heap Overflow
https://notcve.org/view.php?id=CVE-2002-0184
16 May 2002 — Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. Desbordamiento del montón (heap) en sudo anteriores a 1.6.6 puede permitir a usuarios locales ganar privilegios de root mediante caractéres especiales en el argumento -p (prompt), que no son expandidos adecuadamente. • https://www.exploit-db.com/exploits/21420 • CWE-131: Incorrect Calculation of Buffer Size •