CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0043

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.7%

CVSS Severity

CVSS v2 Score 7.2

References

Products affected by CVE-2002-0043

Todd Miller » Sudo » Version: 1.6

cpe:2.3:a:todd_miller:sudo:1.6
Todd Miller » Sudo » Version: 1.6.1

cpe:2.3:a:todd_miller:sudo:1.6.1
Todd Miller » Sudo » Version: 1.6.2

cpe:2.3:a:todd_miller:sudo:1.6.2
Todd Miller » Sudo » Version: 1.6.3

cpe:2.3:a:todd_miller:sudo:1.6.3
Todd Miller » Sudo » Version: 1.6.3_p1

cpe:2.3:a:todd_miller:sudo:1.6.3_p1
Todd Miller » Sudo » Version: 1.6.3_p2

cpe:2.3:a:todd_miller:sudo:1.6.3_p2
Todd Miller » Sudo » Version: 1.6.3_p3

cpe:2.3:a:todd_miller:sudo:1.6.3_p3
Todd Miller » Sudo » Version: 1.6.3_p4

cpe:2.3:a:todd_miller:sudo:1.6.3_p4
Todd Miller » Sudo » Version: 1.6.3_p5

cpe:2.3:a:todd_miller:sudo:1.6.3_p5
Todd Miller » Sudo » Version: 1.6.3_p6

cpe:2.3:a:todd_miller:sudo:1.6.3_p6
Todd Miller » Sudo » Version: 1.6.3_p7

cpe:2.3:a:todd_miller:sudo:1.6.3_p7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-0043

Products

Pricing

Contact Us