Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Debian: DSA 101-1 Critical: Local Root Exploit in Sudo Security

debian
Calendar Grey January 14, 2002
Debian Logo
A critical update is recommended for sudo to address a local privilege escalation flaw identified in Debian systems.
Attackers may trick "sudo" to log failed sudo invocations ...

Summary

Sebastian Krahmer from SuSE found a vulnerability in sudo which could
easily lead into a local root exploit.

This problem has been fixed in upstream version 1.6.4 as well as in
version 1.6.2p2-2.1 for the stable release of Debian GNU/Linux.

We recommend that you upgrade your sudo packages immediately.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 2.2 alias potato
------------------------------------

Source archives:


MD5 checksum: b05ab1661adadf4b709383290e26a737

MD5 checksum: fc5fbac82937b905f6dff443c5e66def

MD5 checksum: dd5944c880fd5cc56bc0f0199e92d2b4

Alpha architecture:



MD5 che...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: sudo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here