CVE-2012-0809 in sudo

Resumen (Inglés)

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2012-01-19

Divulgación

2012-01-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4586	Todd Miller sudo sudo.c sudo_debug Format String	134	Prueba de concepto	Arreglo oficial	CVE-2012-0809

Fuentes

• MITRE
• NVD
• CVE Details