CVE-2014-0106

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users…

published March 11, 2014

CVSS
—
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00338 · 25.8th percentile
Published
2014-03-11T15:00Z
EPSS history
Timeline
  • 11 MAR 15:00Z
    Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users…
    cvelistv5