CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin…

published July 7, 2008

CVSS
—
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Published
2008-07-07T23:00Z
EPSS history
Timeline
  • 07 JUL 23:00Z
    sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin…
    cvelistv5