CVE-2012-0809: High severity sudo vulnerability
Published Feb 1, 2012
·Updated
Format string vulnerability in the sudodebug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
Affected Software
7 affected components
Todd Miller Sudo=1.8.0
Todd Miller Sudo=1.8.1
Todd Miller Sudo=1.8.1p1
Todd Miller Sudo=1.8.1p2
Todd Miller Sudo=1.8.2
Todd Miller Sudo=1.8.3
Todd Miller Sudo=1.8.3p1
Event History
Feb 1, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0809?
CVE-2012-0809 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2012-0809?
To fix CVE-2012-0809, update Sudo to version 1.8.4 or later, which resolves the format string vulnerability.
3
Which versions of Sudo are affected by CVE-2012-0809?
CVE-2012-0809 affects Sudo versions 1.8.0 through 1.8.3p1.
4
What type of vulnerability is CVE-2012-0809?
CVE-2012-0809 is a format string vulnerability that can be exploited by local users.
5
Can CVE-2012-0809 be exploited remotely?
No, CVE-2012-0809 can only be exploited by local users with access to the system.