CVE Vulnerabilities

CVE-2004-1051

Published: Mar 01, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using () style environment variables to create functions that have the same name as any program within the bash script that is called without using the programs full pathname.

Affected Software

Name Vendor Start Version End Version
Mandrake_multi_network_firewall Mandrakesoft 8.2 8.2
Sudo Todd_miller 1.5.6 1.5.6
Sudo Todd_miller 1.5.7 1.5.7
Sudo Todd_miller 1.5.8 1.5.8
Sudo Todd_miller 1.5.9 1.5.9
Sudo Todd_miller 1.6 1.6
Sudo Todd_miller 1.6.1 1.6.1
Sudo Todd_miller 1.6.2 1.6.2
Sudo Todd_miller 1.6.3 1.6.3
Sudo Todd_miller 1.6.3_p1 1.6.3_p1
Sudo Todd_miller 1.6.3_p2 1.6.3_p2
Sudo Todd_miller 1.6.3_p3 1.6.3_p3
Sudo Todd_miller 1.6.3_p4 1.6.3_p4
Sudo Todd_miller 1.6.3_p5 1.6.3_p5
Sudo Todd_miller 1.6.3_p6 1.6.3_p6
Sudo Todd_miller 1.6.3_p7 1.6.3_p7
Sudo Todd_miller 1.6.4 1.6.4
Sudo Todd_miller 1.6.4_p1 1.6.4_p1
Sudo Todd_miller 1.6.4_p2 1.6.4_p2
Sudo Todd_miller 1.6.5 1.6.5
Sudo Todd_miller 1.6.5_p1 1.6.5_p1
Sudo Todd_miller 1.6.5_p2 1.6.5_p2
Sudo Todd_miller 1.6.6 1.6.6
Sudo Todd_miller 1.6.7 1.6.7
Sudo Todd_miller 1.6.8 1.6.8
Sudo Todd_miller 1.6.8_p1 1.6.8_p1
Sudo Ubuntu dapper *
Sudo Ubuntu devel *
Sudo Ubuntu edgy *
Sudo Ubuntu feisty *

References