CVE

Id
9479  
CVE No.
CVE-2004-1051  
Status
Candidate  
Description
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program"s full pathname.  
Phase
Assigned (20041117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63720 9479 CVE-2004-1051 CONFIRM:http://www.sudo.ws/sudo/alerts/bash_functions.html  View
63721 9479 CVE-2004-1051 BUGTRAQ:20041112 Sudo version 1.6.8p2 now available (fwd)  View
63722 9479 CVE-2004-1051 URL:http://marc.info/?l=bugtraq&m=110028877431192&w=2  View
63723 9479 CVE-2004-1051 APPLE:APPLE-SA-2005-05-03  View
63724 9479 CVE-2004-1051 URL:http://lists.apple.com/archives/security-announce/2005/May/msg00001.html  View
63725 9479 CVE-2004-1051 DEBIAN:DSA-596  View
63726 9479 CVE-2004-1051 URL:http://www.debian.org/security/2004/dsa-596  View
63727 9479 CVE-2004-1051 MANDRAKE:MDKSA-2004:133  View
63728 9479 CVE-2004-1051 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:133  View
63729 9479 CVE-2004-1051 TRUSTIX:2004-0061  View
63730 9479 CVE-2004-1051 URL:http://www.trustix.org/errata/2004/0061/  View
63731 9479 CVE-2004-1051 OPENPKG:OpenPKG-SA-2005.002  View
63732 9479 CVE-2004-1051 URL:http://marc.info/?l=bugtraq&m=110598298225675&w=2  View
63733 9479 CVE-2004-1051 UBUNTU:USN-28-1  View
63734 9479 CVE-2004-1051 URL:https://www.ubuntu.com/usn/usn-28-1/  View
63735 9479 CVE-2004-1051 BID:11668  View
63736 9479 CVE-2004-1051 URL:http://www.securityfocus.com/bid/11668  View
63737 9479 CVE-2004-1051 XF:sudo-bash-command-execution(18055)  View

Related JVN