sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.
|Base Score:||6.8||Base Metrics:||AV:N/AC:H/Au:M/C:C/I:C/A:C|
|Access Vector:||Network||Attack Complexity:||High|
|Authentication:||Requires multiple instances||Confidentiality Impact:||Complete|
|Integrity Impact:||Complete||Availability Impact:||Complete|
|Oracle Linux version 5 (sudo)||ELSA-2012-1081||2012-07-16|
|Oracle Linux version 6 (sudo)||ELSA-2012-1081||2012-07-16|
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team