CVEvulnerability

CVE-2012-2337

7.2 HIGH Published 2012-05-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-05-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.

Affected configurations

• todd miller sudo 1.6 • todd miller sudo 1.6.1 • todd miller sudo 1.6.2 • todd miller sudo 1.6.2p3 • todd miller sudo 1.6.3 • todd miller sudo 1.6.3 p7 • todd miller sudo 1.6.4 • todd miller sudo 1.6.4p2 • todd miller sudo 1.6.5 • todd miller sudo 1.6.6 • todd miller sudo 1.6.7 • todd miller sudo 1.6.7p5 • todd miller sudo 1.6.8 • todd miller sudo 1.6.8p12 • todd miller sudo 1.6.9 • todd miller sudo 1.6.9p20 • todd miller sudo 1.6.9p21 • todd miller sudo 1.6.9p22 • todd miller sudo 1.6.9p23

Related

Weakness · not in database (1)

References