7.2

CVE-2002-0043

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Todd Miller ≫ Sudo Version 1.6
Todd Miller ≫ Sudo Version 1.6.1
Todd Miller ≫ Sudo Version 1.6.2
Todd Miller ≫ Sudo Version 1.6.3
Todd Miller ≫ Sudo Version 1.6.3_p1
Todd Miller ≫ Sudo Version 1.6.3_p2
Todd Miller ≫ Sudo Version 1.6.3_p3
Todd Miller ≫ Sudo Version 1.6.3_p4
Todd Miller ≫ Sudo Version 1.6.3_p5
Todd Miller ≫ Sudo Version 1.6.3_p6
Todd Miller ≫ Sudo Version 1.6.3_p7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.94% 0.562
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003
http://marc.info/?l=bugtraq&m=101120193627756&w=2
http://www.debian.org/security/2002/dsa-101
http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html
http://www.redhat.com/support/errata/RHSA-2002-011.html
http://www.redhat.com/support/errata/RHSA-2002-013.html
Patch
Vendor Advisory
http://www.securityfocus.com/advisories/3800
http://www.securityfocus.com/archive/1/250168
Vendor Advisory
http://www.securityfocus.com/bid/3871
http://www.sudo.ws/sudo/alerts/postfix.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/7891