NetSight
IP …
high7.8Public exploit code

CVE-2002-0184

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special c…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

Affected products

VendorProductAffected versions
Sudo ProjectSudo
before 1.6.6
DebianDebian Linux
Version 2.2

Weakness classification

CWE-131

References