CVE-2012-0809
Published Feb 1, 2012
Last updated 7 years ago
Overview
- Description
- Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-134
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CCE5D7D-D269-4A10-B3C0-C5177F30BD29"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F57804C-633D-4A0C-AF73-21C0BFBEA715"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C2447F3-85CF-40F2-9472-B3775DE034DA"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5B06006-124F-4B11-BEC3-D0E5060FCB56"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97FF463B-A0BE-4E14-B644-F42D5D5CAB9C"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2224F7BC-145F-4E06-AAD8-280AD42339CF"
},
{
"criteria": "cpe:2.3:a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "344BF379-17AF-4296-B0A7-947B09C1581B"
}
],
"operator": "OR"
}
]
}
]