sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a users home directory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sudo | Todd_miller | 1.6 (including) | 1.6 (including) |
| Sudo | Todd_miller | 1.6.1 (including) | 1.6.1 (including) |
| Sudo | Todd_miller | 1.6.2 (including) | 1.6.2 (including) |
| Sudo | Todd_miller | 1.6.3 (including) | 1.6.3 (including) |
| Sudo | Todd_miller | 1.6.3_p1 (including) | 1.6.3_p1 (including) |
| Sudo | Todd_miller | 1.6.3_p2 (including) | 1.6.3_p2 (including) |
| Sudo | Todd_miller | 1.6.3_p3 (including) | 1.6.3_p3 (including) |
| Sudo | Todd_miller | 1.6.3_p4 (including) | 1.6.3_p4 (including) |
| Sudo | Todd_miller | 1.6.3_p5 (including) | 1.6.3_p5 (including) |
| Sudo | Todd_miller | 1.6.3_p6 (including) | 1.6.3_p6 (including) |
| Sudo | Todd_miller | 1.6.3_p7 (including) | 1.6.3_p7 (including) |
| Sudo | Todd_miller | 1.6.4_p1 (including) | 1.6.4_p1 (including) |
| Sudo | Todd_miller | 1.6.4_p2 (including) | 1.6.4_p2 (including) |
| Sudo | Todd_miller | 1.6.5_p1 (including) | 1.6.5_p1 (including) |
| Sudo | Todd_miller | 1.6.5_p2 (including) | 1.6.5_p2 (including) |
| Sudo | Todd_miller | 1.6.7_p5 (including) | 1.6.7_p5 (including) |
| Sudo | Todd_miller | 1.6.8_p1 (including) | 1.6.8_p1 (including) |
| Sudo | Todd_miller | 1.6.8_p2 (including) | 1.6.8_p2 (including) |
| Sudo | Todd_miller | 1.6.8_p5 (including) | 1.6.8_p5 (including) |
| Sudo | Todd_miller | 1.6.8_p7 (including) | 1.6.8_p7 (including) |
| Sudo | Todd_miller | 1.6.8_p8 (including) | 1.6.8_p8 (including) |
| Sudo | Todd_miller | 1.6.8_p9 (including) | 1.6.8_p9 (including) |
| Sudo | Todd_miller | 1.6.8_p12 (including) | 1.6.8_p12 (including) |
| Sudo | Todd_miller | 1.6.9_p17 (including) | 1.6.9_p17 (including) |
| Sudo | Todd_miller | 1.6.9_p18 (including) | 1.6.9_p18 (including) |
| Sudo | Todd_miller | 1.6.9_p19 (including) | 1.6.9_p19 (including) |
| Sudo | Todd_miller | 1.7.0 (including) | 1.7.0 (including) |
| Sudo | Todd_miller | 1.7.1 (including) | 1.7.1 (including) |
| Sudo | Todd_miller | 1.7.2 (including) | 1.7.2 (including) |
| Sudo | Todd_miller | 1.7.2p1 (including) | 1.7.2p1 (including) |
| Sudo | Todd_miller | 1.7.2p2 (including) | 1.7.2p2 (including) |
| Sudo | Todd_miller | 1.7.2p3 (including) | 1.7.2p3 (including) |
| Sudo | Ubuntu | dapper | * |
| Sudo | Ubuntu | devel | * |
| Sudo | Ubuntu | hardy | * |
| Sudo | Ubuntu | intrepid | * |
| Sudo | Ubuntu | jaunty | * |
| Sudo | Ubuntu | karmic | * |
| Sudo | Ubuntu | upstream | * |
| Red Hat Enterprise Linux 5 | RedHat | sudo-0:1.6.9p17-6.el5_4 | * |