CVE

Id
13037  
CVE No.
CVE-2005-1831  
Status
Candidate  
Description
** DISPUTED ** Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don"t see how this could happen unless the user"s actual password was empty."  
Phase
Assigned (20050602)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93882 13037 CVE-2005-1831 BUGTRAQ:20050531 [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3  View
93883 13037 CVE-2005-1831 URL:http://marc.info/?l=bugtraq&m=111755694008928&w=2  View
93884 13037 CVE-2005-1831 BUGTRAQ:20050531 RE: [securitysuse.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3  View
93885 13037 CVE-2005-1831 URL:http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html  View
93886 13037 CVE-2005-1831 BUGTRAQ:20050531 Re: [securitysuse.de] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3  View
93887 13037 CVE-2005-1831 URL:http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html  View
93888 13037 CVE-2005-1831 OSVDB:20417  View

Related JVN