CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2959

Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 28.4%

CVSS Severity

CVSS v2 Score 4.6

References

Products affected by CVE-2005-2959

Todd Miller » Sudo » Version: 1.6

cpe:2.3:a:todd_miller:sudo:1.6
Todd Miller » Sudo » Version: 1.6.1

cpe:2.3:a:todd_miller:sudo:1.6.1
Todd Miller » Sudo » Version: 1.6.2

cpe:2.3:a:todd_miller:sudo:1.6.2
Todd Miller » Sudo » Version: 1.6.3

cpe:2.3:a:todd_miller:sudo:1.6.3
Todd Miller » Sudo » Version: 1.6.3_p1

cpe:2.3:a:todd_miller:sudo:1.6.3_p1
Todd Miller » Sudo » Version: 1.6.3_p2

cpe:2.3:a:todd_miller:sudo:1.6.3_p2
Todd Miller » Sudo » Version: 1.6.3_p3

cpe:2.3:a:todd_miller:sudo:1.6.3_p3
Todd Miller » Sudo » Version: 1.6.3_p4

cpe:2.3:a:todd_miller:sudo:1.6.3_p4
Todd Miller » Sudo » Version: 1.6.3_p5

cpe:2.3:a:todd_miller:sudo:1.6.3_p5
Todd Miller » Sudo » Version: 1.6.3_p6

cpe:2.3:a:todd_miller:sudo:1.6.3_p6
Todd Miller » Sudo » Version: 1.6.3_p7

cpe:2.3:a:todd_miller:sudo:1.6.3_p7
Todd Miller » Sudo » Version: 1.6.3p1

cpe:2.3:a:todd_miller:sudo:1.6.3p1
Todd Miller » Sudo » Version: 1.6.3p2

cpe:2.3:a:todd_miller:sudo:1.6.3p2
Todd Miller » Sudo » Version: 1.6.3p3

cpe:2.3:a:todd_miller:sudo:1.6.3p3
Todd Miller » Sudo » Version: 1.6.3p4

cpe:2.3:a:todd_miller:sudo:1.6.3p4
Todd Miller » Sudo » Version: 1.6.3p5

cpe:2.3:a:todd_miller:sudo:1.6.3p5
Todd Miller » Sudo » Version: 1.6.3p6

cpe:2.3:a:todd_miller:sudo:1.6.3p6
Todd Miller » Sudo » Version: 1.6.3p7

cpe:2.3:a:todd_miller:sudo:1.6.3p7
Todd Miller » Sudo » Version: 1.6.4

cpe:2.3:a:todd_miller:sudo:1.6.4
Todd Miller » Sudo » Version: 1.6.4_p1

cpe:2.3:a:todd_miller:sudo:1.6.4_p1
Todd Miller » Sudo » Version: 1.6.4_p2

cpe:2.3:a:todd_miller:sudo:1.6.4_p2
Todd Miller » Sudo » Version: 1.6.4p1

cpe:2.3:a:todd_miller:sudo:1.6.4p1
Todd Miller » Sudo » Version: 1.6.4p2

cpe:2.3:a:todd_miller:sudo:1.6.4p2
Todd Miller » Sudo » Version: 1.6.5

cpe:2.3:a:todd_miller:sudo:1.6.5
Todd Miller » Sudo » Version: 1.6.5_p1

cpe:2.3:a:todd_miller:sudo:1.6.5_p1
Todd Miller » Sudo » Version: 1.6.5_p2

cpe:2.3:a:todd_miller:sudo:1.6.5_p2
Todd Miller » Sudo » Version: 1.6.5p1

cpe:2.3:a:todd_miller:sudo:1.6.5p1
Todd Miller » Sudo » Version: 1.6.5p2

cpe:2.3:a:todd_miller:sudo:1.6.5p2
Todd Miller » Sudo » Version: 1.6.6

cpe:2.3:a:todd_miller:sudo:1.6.6
Todd Miller » Sudo » Version: 1.6.7

cpe:2.3:a:todd_miller:sudo:1.6.7
Todd Miller » Sudo » Version: 1.6.7_p5

cpe:2.3:a:todd_miller:sudo:1.6.7_p5
Todd Miller » Sudo » Version: 1.6.8

cpe:2.3:a:todd_miller:sudo:1.6.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2959

Products

Pricing

Contact Us