| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
sudo: environment variable sanitizing
| Package(s): | sudo | CVE #(s): | CAN-2004-1051 | ||||||||||||||||||
| Created: | November 17, 2004 | Updated: | May 15, 2005 | ||||||||||||||||||
| Description: | Versions of sudo prior to 1.6.8p2 fail to properly sanitize the environment prior to running shell scripts; this failure can be exploited by a sudo user to subvert scripts and obtain shell access. See the 1.6.8p2 announcement for more information. | ||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||
(Log in to post comments)