CVSS: 3.7EPSS: 0%CPEs: 29EXPL: 0CVE-2005-1993
https://notcve.org/view.php?id=CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. • http://docs.info.apple.com/article.html?artnum=302847 http://secunia.com/advisories/15744 http://secunia.com/advisories/17813 http://www.debian.org/security/2005/dsa-735 http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.osvdb.org/17396 http://www.redhat.com/support/errata/RHSA-2005-535.html http://www.securityfocus.com/archive/1/402741 http://www.securityfocus.com/archive/1/425974/100/0/threaded http://www.securityfocus.com/bid/13993 http •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2002-0184 – Sudo 1.6.x - Password Prompt Heap Overflow
https://notcve.org/view.php?id=CVE-2002-0184
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. Desbordamiento del montón (heap) en sudo anteriores a 1.6.6 puede permitir a usuarios locales ganar privilegios de root mediante caractéres especiales en el argumento -p (prompt), que no son expandidos adecuadamente. • https://www.exploit-db.com/exploits/21420 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475 http://marc.info/?l=bugtraq&m=101974610509912&w=2 http://marc.info/?l=bugtraq&m=101975443619600&w=2 http://marc.info/?l=bugtraq&m=101979472822196&w=2 http://marc.info/? • CWE-131: Incorrect Calculation of Buffer Size •