initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Enterprise_linux | Redhat | 3.0 (including) | 3.0 (including) |
Enterprise_linux | Redhat | 4.0 (including) | 4.0 (including) |