sudo rm -rf ~/DiagonalCiso / Global Cyber Security@CisoDiagonal
@IceSolst CVE-2012-0809
0001014
2.7K followersView on X
CVE-2012-0809(todd_miller / sudo)
LOWCVSS 7.2 · HIGHImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-134
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- sudo
Affected systems
Vendors
Products
sudo
7 versions affected across 1 product
Deep dive
Full discourse1 post
CPE platform detail7 entries
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | todd_miller | sudo | 1.8.0 | - | - |
| App | todd_miller | sudo | 1.8.1 | - | - |
| App | todd_miller | sudo | 1.8.1p1 | - | - |
| App | todd_miller | sudo | 1.8.1p2 | - | - |
| App | todd_miller | sudo | 1.8.2 | - | - |
| App | todd_miller | sudo | 1.8.3 | - | - |
| App | todd_miller | sudo | 1.8.3p1 | - | - |