CVE-2005-2959 : Detail

CVE-2005-2959

A01-Broken Access Control
0.35%V3
Local
2005-10-25
02h00 +00:00
2018-10-03
18h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-264 Category : Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Todd_miller>>Sudo >> Version 1.6

Todd_miller>>Sudo >> Version 1.6.1

Todd_miller>>Sudo >> Version 1.6.2

Todd_miller>>Sudo >> Version 1.6.3

Todd_miller>>Sudo >> Version 1.6.3_p1

    Todd_miller>>Sudo >> Version 1.6.3_p2

      Todd_miller>>Sudo >> Version 1.6.3_p3

        Todd_miller>>Sudo >> Version 1.6.3_p4

          Todd_miller>>Sudo >> Version 1.6.3_p5

            Todd_miller>>Sudo >> Version 1.6.3_p6

              Todd_miller>>Sudo >> Version 1.6.3_p7

              Todd_miller>>Sudo >> Version 1.6.3p1

                Todd_miller>>Sudo >> Version 1.6.3p2

                  Todd_miller>>Sudo >> Version 1.6.3p3

                    Todd_miller>>Sudo >> Version 1.6.3p4

                      Todd_miller>>Sudo >> Version 1.6.3p5

                        Todd_miller>>Sudo >> Version 1.6.3p6

                          Todd_miller>>Sudo >> Version 1.6.3p7

                            Todd_miller>>Sudo >> Version 1.6.4

                            Todd_miller>>Sudo >> Version 1.6.4_p1

                              Todd_miller>>Sudo >> Version 1.6.4_p2

                                Todd_miller>>Sudo >> Version 1.6.4p1

                                  Todd_miller>>Sudo >> Version 1.6.4p2

                                  Todd_miller>>Sudo >> Version 1.6.5

                                  Todd_miller>>Sudo >> Version 1.6.5_p1

                                    Todd_miller>>Sudo >> Version 1.6.5_p2

                                      Todd_miller>>Sudo >> Version 1.6.5p1

                                        Todd_miller>>Sudo >> Version 1.6.5p2

                                          Todd_miller>>Sudo >> Version 1.6.6

                                          Todd_miller>>Sudo >> Version 1.6.7

                                          Todd_miller>>Sudo >> Version 1.6.7_p5

                                            Todd_miller>>Sudo >> Version 1.6.8

                                            References

                                            http://secunia.com/advisories/17666
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            http://secunia.com/advisories/18549
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            http://www.us-cert.gov/cas/techalerts/TA07-072A.html
                                            Tags : third-party-advisory, x_refsource_CERT
                                            http://www.mandriva.com/security/advisories?name=MDKSA-2005:201
                                            Tags : vendor-advisory, x_refsource_MANDRIVA
                                            http://www.debian.org/security/2005/dsa-870
                                            Tags : vendor-advisory, x_refsource_DEBIAN
                                            http://secunia.com/advisories/17322
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            http://secunia.com/advisories/17390
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            http://www.securityfocus.com/bid/15191
                                            Tags : vdb-entry, x_refsource_BID
                                            http://secunia.com/advisories/17345
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            http://www.vupen.com/english/advisories/2007/0930
                                            Tags : vdb-entry, x_refsource_VUPEN
                                            http://secunia.com/advisories/17318
                                            Tags : third-party-advisory, x_refsource_SECUNIA
                                            https://usn.ubuntu.com/213-1/
                                            Tags : vendor-advisory, x_refsource_UBUNTU
                                            http://www.securityfocus.com/advisories/9643
                                            Tags : vendor-advisory, x_refsource_SUSE
                                            http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html
                                            Tags : vendor-advisory, x_refsource_OPENPKG
                                            http://secunia.com/advisories/24479
                                            Tags : third-party-advisory, x_refsource_SECUNIA