Unscored severity · published Feb 1, 2012
CVE-2012-0809
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Sudo · Todd Miller
1.8.0; 1.8.1; 1.8.1p1; 1.8.1p2; 1.8.2; 1.8.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0809
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201203-06.xml
Exploit
http://www.sudo.ws/sudo/alerts/sudo_debug.html
More from Sudo
8.4
CVE-2005-1831
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting…
7.0
CVE-2016-7032
sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen…
–
CVE-2014-0106
Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions…
–
CVE-2013-2777
sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with…
–
CVE-2013-2776
sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate…