Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2002-0043
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-31 Jan, 2002 | 05:00
Updated At-03 Apr, 2025 | 01:03

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.2HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 7.2
Base severity: HIGH
Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CPE Matches
todd_miller
todd_miller
>>sudo>>1.6
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.1
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.2
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p1
cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p2
cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p3
cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p4
cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p5
cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p6
cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*
todd_miller
todd_miller
>>sudo>>1.6.3_p7
cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asccve@mitre.org
N/A
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451cve@mitre.org
N/A
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003cve@mitre.org
N/A
http://marc.info/?l=bugtraq&m=101120193627756&w=2cve@mitre.org
N/A
http://www.debian.org/security/2002/dsa-101cve@mitre.org
N/A
http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.htmlcve@mitre.org
N/A
http://www.redhat.com/support/errata/RHSA-2002-011.htmlcve@mitre.org
N/A
http://www.redhat.com/support/errata/RHSA-2002-013.htmlcve@mitre.org
Patch
Vendor Advisory
http://www.securityfocus.com/advisories/3800cve@mitre.org
N/A
http://www.securityfocus.com/archive/1/250168cve@mitre.org
Vendor Advisory
http://www.securityfocus.com/bid/3871cve@mitre.org
N/A
http://www.sudo.ws/sudo/alerts/postfix.htmlcve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/7891cve@mitre.org
N/A
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.ascaf854a3a-2127-422b-91ae-364da2661108
N/A
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451af854a3a-2127-422b-91ae-364da2661108
N/A
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003af854a3a-2127-422b-91ae-364da2661108
N/A
http://marc.info/?l=bugtraq&m=101120193627756&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.debian.org/security/2002/dsa-101af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.redhat.com/support/errata/RHSA-2002-011.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.redhat.com/support/errata/RHSA-2002-013.htmlaf854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://www.securityfocus.com/advisories/3800af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/250168af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/bid/3871af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.sudo.ws/sudo/alerts/postfix.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/7891af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=101120193627756&w=2
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.debian.org/security/2002/dsa-101
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-011.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-013.html
Source: cve@mitre.org
Resource:
Patch
Vendor Advisory
Hyperlink: http://www.securityfocus.com/advisories/3800
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/250168
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.securityfocus.com/bid/3871
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.sudo.ws/sudo/alerts/postfix.html
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/7891
Source: cve@mitre.org
Resource: N/A
Hyperlink: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=101120193627756&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.debian.org/security/2002/dsa-101
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-011.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-013.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Vendor Advisory
Hyperlink: http://www.securityfocus.com/advisories/3800
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/250168
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.securityfocus.com/bid/3871
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.sudo.ws/sudo/alerts/postfix.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/7891
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found