CVE-2001-0279

Description

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

Affected products

• Debian / debian_linux2.2 – 2.2
• mandrakesoft / mandrake_linux7.1 – 7.1
• mandrakesoft / mandrake_linux7.2 – 7.2
• mandrakesoft / mandrake_linux_corporate_server1.0.1 – 1.0.1

Exploits & proofs of concept

• exploit-dbSudo 1.5/1.6 - Heap Corruptionby MaXX

References

• MISChttp://www.redhat.com/support/errata/RHSA-2001-018.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-02/0414.html
• MISChttp://www.linux-mandrake.com/en/security/2001/MDKSA-2001-024.php3
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-02/0437.html
• VENDOR_ADVISORYhttp://www.debian.org/security/2001/dsa-031
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-02/0427.html
• MISChttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000381
• MISChttp://www.redhat.com/support/errata/RHSA-2001-019.html