Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 490
Alerts This Week
Warning Icon 1 490

Debian Sudo Critical Command Execution Threat DSA-2478-1 CVE-2012-2337

debian
Calendar Grey May 23, 2012
Scroller Debian
Enhancement suggested for sudo to rectify command execution problem caused by network mask misinterpretation in Debian.
It was discovered that sudo misparsed network masks used in Host and Host_List stanzas
Topics%20covered

Topics Covered

security advisory critical debian command execution Debian remote sudo parsing error

Summary

It was discovered that sudo misparsed network masks used in Host and
Host_List stanzas. This allowed the execution of commands on hosts,
where the user would not be allowed to run the specified command.

For the stable distribution (squeeze), this problem has been fixed in
version 1.7.4p4-2.squeeze.3.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your sudo packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: sudo
CVE ID: CVE-2012-2337

Topics%20covered

Topics Covered

security advisory critical debian command execution Debian remote sudo parsing error

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.