initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux | Redhat | 3.0 (including) | 3.0 (including) |
| Enterprise_linux | Redhat | 4.0 (including) | 4.0 (including) |
| Red Hat Enterprise Linux 3 | RedHat | initscripts-0:7.31.30.EL-1 | * |
| Red Hat Enterprise Linux 4 | RedHat | initscripts-0:7.93.24.EL-1.1 | * |