Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-2337HistoryMay 18, 2012 - 6:55 p.m.
CVE-2012-2337
2012-05-1818:55:01
Debian Security Bug Tracker
security-tracker.debian.org
9
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sudo | < 1.8.3p2-1.1 | sudo_1.8.3p2-1.1_all.deb |
| Debian | 11 | all | sudo | < 1.8.3p2-1.1 | sudo_1.8.3p2-1.1_all.deb |
| Debian | 999 | all | sudo | < 1.8.3p2-1.1 | sudo_1.8.3p2-1.1_all.deb |
| Debian | 13 | all | sudo | < 1.8.3p2-1.1 | sudo_1.8.3p2-1.1_all.deb |
Related
nessus
nessus
Oracle Linux 5 / 6 : sudo (ELSA-2012-1081)
2013-07-12 00:00:00
CentOS 5 / 6 : sudo (CESA-2012:1081)
2012-07-17 00:00:00
openvas
openvas
Mandriva Update for sudo MDVSA-2012:079 (sudo)
2012-08-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0641-1)
2021-06-09 00:00:00
CentOS Update for sudo CESA-2012:1081 centos6
2012-07-30 00:00:00
cve
cve
CVE-2012-2337
2012-05-18 18:55:01
fedora
fedora
[SECURITY] Fedora 17 Update: sudo-1.8.3p1-7.fc17
2012-05-29 10:24:28
[SECURITY] Fedora 16 Update: sudo-1.8.3p1-3.fc16
2012-07-12 18:56:05
[SECURITY] Fedora 17 Update: sudo-1.8.6p7-1.fc17
2013-03-19 20:04:50
freebsd
freebsd
sudo -- netmask vulnerability
2012-05-16 00:00:00
ubuntu
ubuntu
Sudo vulnerability
2012-05-16 00:00:00
redhat
redhat
(RHSA-2012:1081) Moderate: sudo security update
2012-07-16 00:00:00
(RHSA-2012:1185) Moderate: rhev-hypervisor5 security and bug fix update
2012-08-21 00:00:00
(RHSA-2012:1200) Moderate: rhev-hypervisor6 security and bug fix update
2012-08-23 00:00:00
cvelist
cvelist
CVE-2012-2337
2012-05-18 18:00:00
oraclelinux
oraclelinux
sudo security update
2012-07-16 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2012-07-09 00:00:00
centos
centos
sudo security update
2012-07-16 17:37:03
veracode
veracode
Authorization Bypass
2019-01-15 08:54:23
nvd
nvd
CVE-2012-2337
2012-05-18 18:55:01
securityvulns
securityvulns
sudo protection bypass
2012-05-24 00:00:00
debian
debian
[SECURITY] [DSA 2478-1] sudo security update
2012-05-23 19:30:06
amazon
amazon
Medium: sudo
2012-07-25 18:00:00
ubuntucve
ubuntucve
CVE-2012-2337
2012-05-16 00:00:00
prion
prion
Command injection
2012-05-18 18:55:00
vmware
vmware
VMware ESX patch address security issues
2013-05-30 00:00:00
VMware ESX third party update for Service Console package sudo
2013-05-30 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2012-2337