CVSS: 3.7EPSS: 0%CPEs: 29EXPL: 0CVE-2005-1993
https://notcve.org/view.php?id=CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. • http://docs.info.apple.com/article.html?artnum=302847 http://secunia.com/advisories/15744 http://secunia.com/advisories/17813 http://www.debian.org/security/2005/dsa-735 http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.osvdb.org/17396 http://www.redhat.com/support/errata/RHSA-2005-535.html http://www.securityfocus.com/archive/1/402741 http://www.securityfocus.com/archive/1/425974/100/0/threaded http://www.securityfocus.com/bid/13993 http •
CVSS: 7.2EPSS: 0%CPEs: 51EXPL: 0CVE-2004-1051
https://notcve.org/view.php?id=CVE-2004-1051
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname. • http://lists.apple.com/archives/security-announce/2005/May/msg00001.html http://marc.info/?l=bugtraq&m=110028877431192&w=2 http://marc.info/?l=bugtraq&m=110598298225675&w=2 http://www.debian.org/security/2004/dsa-596 http://www.mandriva.com/security/advisories?name=MDKSA-2004:133 http://www.securityfocus.com/bid/11668 http://www.sudo.ws/sudo/alerts/bash_functions.html http://www.trustix.org/errata/2004/0061 https://exchange.xforce.ibmcloud.com/vulnerabilities/18055 https& •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2002-0184 – Sudo 1.6.x - Password Prompt Heap Overflow
https://notcve.org/view.php?id=CVE-2002-0184
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. Desbordamiento del montón (heap) en sudo anteriores a 1.6.6 puede permitir a usuarios locales ganar privilegios de root mediante caractéres especiales en el argumento -p (prompt), que no son expandidos adecuadamente. • https://www.exploit-db.com/exploits/21420 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475 http://marc.info/?l=bugtraq&m=101974610509912&w=2 http://marc.info/?l=bugtraq&m=101975443619600&w=2 http://marc.info/?l=bugtraq&m=101979472822196&w=2 http://marc.info/? • CWE-131: Incorrect Calculation of Buffer Size •
CVSS: 2.1EPSS: 0%CPEs: 3EXPL: 1CVE-1999-1496
https://notcve.org/view.php?id=CVE-1999-1496
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist. • http://www.securityfocus.com/archive/1/14665 http://www.securityfocus.com/bid/321 https://exchange.xforce.ibmcloud.com/vulnerabilities/2277 •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-1999-0958
https://notcve.org/view.php?id=CVE-1999-0958
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. • http://marc.info/?l=bugtraq&m=88465708614896&w=2 •