Vulnerability in Todd Miller Sudo
CVE-2002-0043
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.
EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.
Affected products
- Todd_miller Sudo — versions 1.6, 1.6.1, 1.6.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_IMMUNIX)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
Frequently asked questions
- What is CVE-2002-0043?
- CVE-2002-0043 is a vulnerability in Todd Miller Sudo. Published 2002-01-31.
- Is CVE-2002-0043 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.