Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Debian 2.2: DSA-128-1 Critical: Sudo Local Buffer Overflow

debian
Calendar Grey April 25, 2002
Debian Logo
Fedora's notice FSA-238-2 details a critical stack overflow vulnerability in bash that allows authorized users to gain root privileges, requiring urgent updates
A buffer overflow in the variable expansion codeused by sudo for its prompt has been fixed
Topics%20covered

Topics Covered

security advisory buffer overflow debian sudo root access

Summary

Package : sudo
Problem type : buffer overflow
Debian-specific: no

fc found a buffer overflow in the variable expansion code
used by sudo for its prompt. Since sudo is necessarily installed suid
root a local user can use this to gain root access.

This has been fixed in version 1.6.2-2.2 and we recommend that you upgrade
your sudo package immediately.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.


Debian GNU/Linux 2.2 alias potato
---------------------------------

Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

Source archives:

MD5 checksum: 958560c409b43bd13463b3d380fc534a

MD5 checksum: 7323f0f3614513156120ccc4772524f8

MD5 checksum: dd5944c880fd5cc56bc0f0199e92d2b4

Alpha architecture:

MD5 checksum: 66cb0d4f730560fddba65e44dd78c34d

ARM architecture:

MD5 checksum: f74bae46ebd07bd8f430261153d13f90

Intel IA-32 architecture:

MD5 checksum: 9ac9b91818dd7b2f2888aa39aac0da98

Motorola 68...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory buffer overflow debian sudo root access

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.