CVEvulnerability

CVE-2016-7032

7.0 HIGH Published 2017-04-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

Affected configurations

• todd miller sudo 1.6.8 • todd miller sudo 1.6.9 • todd miller sudo 1.7.0 • todd miller sudo 1.7.1 • todd miller sudo 1.7.2 • todd miller sudo 1.7.3 • todd miller sudo 1.7.4 • todd miller sudo 1.7.5 • todd miller sudo 1.7.6 • todd miller sudo 1.7.7 • todd miller sudo 1.7.8 • todd miller sudo 1.7.9 • todd miller sudo 1.7.10 • todd miller sudo 1.8.0 • todd miller sudo 1.8.1 • todd miller sudo 1.8.2 • todd miller sudo 1.8.3 • todd miller sudo 1.8.4 • todd miller sudo 1.8.5 • todd miller sudo 1.8.6 • todd miller sudo 1.8.7 • todd miller sudo 1.8.8 • todd miller sudo 1.8.9 • todd miller sudo 1.8.10 • todd miller sudo 1.8.11 • todd miller sudo 1.8.12 • todd miller sudo 1.8.13 • todd miller sudo 1.8.14

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References