Browse CVEs

HIGH 7.0 CVE-2016-7032 sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls th… Sudo Mitigation only Fix from $1,9502017-04-14 HIGH 7.2 CVE-2012-2337 sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local… Sudo Mitigation only Fix from $1,9502012-05-18 HIGH 7.2 CVE-2012-0809 Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string s… Sudo No fix yet Fix from $1,9502012-02-01 MEDIUM 6.2 CVE-2010-2956 Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which … Sudo Mitigation only Fix from $1,6002010-09-10 MEDIUM 6.9 CVE-2010-1163 The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same n… Sudo Mitigation only Fix from $1,6002010-04-16 HIGH 8.4 CVE-2005-1831 Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering… Sudo Mitigation only Fix from $1,9502005-05-31 HIGH 7.2 CVE-1999-0958 sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. Sudo Mitigation only Fix from $1,9501998-01-12