CVEvulnerability

CVE-2012-0809

7.2 HIGH Published 2012-02-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-134

Description

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

Affected configurations

• todd miller sudo 1.8.0 • todd miller sudo 1.8.1 • todd miller sudo 1.8.1p1 • todd miller sudo 1.8.1p2 • todd miller sudo 1.8.2 • todd miller sudo 1.8.3 • todd miller sudo 1.8.3p1

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References