CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.6%

CVSS Severity

CVSS v2 Score 7.2

References

Products affected by CVE-2004-1051

Mandrakesoft » Mandrake Multi Network Firewall » Version: 8.2

cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2
Todd Miller » Sudo » Version: 1.5.6

cpe:2.3:a:todd_miller:sudo:1.5.6
Todd Miller » Sudo » Version: 1.5.7

cpe:2.3:a:todd_miller:sudo:1.5.7
Todd Miller » Sudo » Version: 1.5.8

cpe:2.3:a:todd_miller:sudo:1.5.8
Todd Miller » Sudo » Version: 1.5.9

cpe:2.3:a:todd_miller:sudo:1.5.9
Todd Miller » Sudo » Version: 1.6

cpe:2.3:a:todd_miller:sudo:1.6
Todd Miller » Sudo » Version: 1.6.1

cpe:2.3:a:todd_miller:sudo:1.6.1
Todd Miller » Sudo » Version: 1.6.2

cpe:2.3:a:todd_miller:sudo:1.6.2
Todd Miller » Sudo » Version: 1.6.3

cpe:2.3:a:todd_miller:sudo:1.6.3
Todd Miller » Sudo » Version: 1.6.3_p1

cpe:2.3:a:todd_miller:sudo:1.6.3_p1
Todd Miller » Sudo » Version: 1.6.3_p2

cpe:2.3:a:todd_miller:sudo:1.6.3_p2
Todd Miller » Sudo » Version: 1.6.3_p3

cpe:2.3:a:todd_miller:sudo:1.6.3_p3
Todd Miller » Sudo » Version: 1.6.3_p4

cpe:2.3:a:todd_miller:sudo:1.6.3_p4
Todd Miller » Sudo » Version: 1.6.3_p5

cpe:2.3:a:todd_miller:sudo:1.6.3_p5
Todd Miller » Sudo » Version: 1.6.3_p6

cpe:2.3:a:todd_miller:sudo:1.6.3_p6
Todd Miller » Sudo » Version: 1.6.3_p7

cpe:2.3:a:todd_miller:sudo:1.6.3_p7
Todd Miller » Sudo » Version: 1.6.4

cpe:2.3:a:todd_miller:sudo:1.6.4
Todd Miller » Sudo » Version: 1.6.4_p1

cpe:2.3:a:todd_miller:sudo:1.6.4_p1
Todd Miller » Sudo » Version: 1.6.4_p2

cpe:2.3:a:todd_miller:sudo:1.6.4_p2
Todd Miller » Sudo » Version: 1.6.5

cpe:2.3:a:todd_miller:sudo:1.6.5
Todd Miller » Sudo » Version: 1.6.5_p1

cpe:2.3:a:todd_miller:sudo:1.6.5_p1
Todd Miller » Sudo » Version: 1.6.5_p2

cpe:2.3:a:todd_miller:sudo:1.6.5_p2
Todd Miller » Sudo » Version: 1.6.6

cpe:2.3:a:todd_miller:sudo:1.6.6
Todd Miller » Sudo » Version: 1.6.7

cpe:2.3:a:todd_miller:sudo:1.6.7
Todd Miller » Sudo » Version: 1.6.8

cpe:2.3:a:todd_miller:sudo:1.6.8
Todd Miller » Sudo » Version: 1.6.8_p1

cpe:2.3:a:todd_miller:sudo:1.6.8_p1
Debian » Debian Linux » Version: 3.0

cpe:2.3:o:debian:debian_linux:3.0
Mandrakesoft » Mandrake Linux » Version: 10.0

cpe:2.3:o:mandrakesoft:mandrake_linux:10.0
Mandrakesoft » Mandrake Linux » Version: 10.1

cpe:2.3:o:mandrakesoft:mandrake_linux:10.1
Mandrakesoft » Mandrake Linux » Version: 9.2

cpe:2.3:o:mandrakesoft:mandrake_linux:9.2
Mandrakesoft » Mandrake Linux Corporate Server » Version: 2.1

cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1
Trustix » Secure Linux » Version: 1.5

cpe:2.3:o:trustix:secure_linux:1.5
Trustix » Secure Linux » Version: 2.0

cpe:2.3:o:trustix:secure_linux:2.0
Trustix » Secure Linux » Version: 2.1

cpe:2.3:o:trustix:secure_linux:2.1
Trustix » Secure Linux » Version: 2.2

cpe:2.3:o:trustix:secure_linux:2.2
Ubuntu » Ubuntu Linux » Version: 4.1

cpe:2.3:o:ubuntu:ubuntu_linux:4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1051

Products

Pricing

Contact Us