NVD

Id
44150  
Name
CVE-2012-2337  
Description
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-05-18  
Modified Date
2012-08-13  
Seq
2012-2337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221789 44150 CVE-2012-2337 FEDORA-2012-7998  View
221790 44150 CVE-2012-2337 DSA-2478  View
221791 44150 CVE-2012-2337 MDVSA-2012:079  View
221792 44150 CVE-2012-2337 1027077  View
221793 44150 CVE-2012-2337 http://www.sudo.ws/sudo/alerts/netmask.html  View
221794 44150 CVE-2012-2337 https://bugzilla.redhat.com/show_bug.cgi?id=820677  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26754 JVNDB-2012-002461 sudo におけるコマンドの制限を回避される脆弱性 sudo はネットマスクの構文 (netmask syntax) を使用した設定を適切にサポートしないため、コマンドの制限を回避される脆弱性が存在します。 CVE-2012-2337 55575 CVE-2012-2337 44150 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002461.html 2012-05-18 2012-09-04 View