• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Todd Miller Sudo Local Race Condition Vulnerability

Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.


OpenBSD OpenBSD 3.7

• OpenBSD 003_sudo.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/003_sudo.patch

OpenBSD OpenBSD 3.6

• OpenBSD 018_sudo.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch

Todd Miller Sudo 1.5.7

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.5.8

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.5.9

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.1

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.2

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.3

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.3 p1

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.3 p5

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.3 p4

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.3 p7

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.4 p2

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.4 p1

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.4

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.5 p2

• RedHat sudo-1.6.5p2-2.3.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/sudo-1.6.5p2- 2.3.legacy.i386.rpm


• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.5 p1

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.7 p5

• Conectiva sudo-1.6.8p9-42425U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/sudo-1.6.8p9-42425U10_1cl. i386.rpm


• Conectiva sudo-doc-1.6.8p9-42425U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/sudo-doc-1.6.8p9-42425U10_ 1cl.i386.rpm


• Mandriva sudo-1.6.7-0.p5.2.2.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva sudo-1.6.7-0.p5.2.2.100mdk.i586.rpm
  Mandrakelinux 10.0:
  http://www.mandriva.com/en/download


• Mandriva sudo-1.6.7-0.p5.2.2.100mdk.src.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva sudo-1.6.7-0.p5.2.2.100mdk.src.rpm
  Mandrakelinux 10.0:
  http://www.mandriva.com/en/download


• RedHat sudo-1.6.7p5-2.3.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/sudo-1.6.7p5-2. 3.legacy.i386.rpm


• RedHat sudo-1.6.7p5-26.2.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/sudo-1.6.7p5-26 .2.legacy.i386.rpm


• SuSE sudo-1.6.7p5-117.4.i586.rpm
  SUSE Linux 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/sudo-1.6.7p5-117. 4.i586.rpm


• SuSE sudo-1.6.7p5-117.4.x86_64.rpm
  SUSE Linux 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/sudo-1.6.7p5- 117.4.x86_64.rpm


• SuSE sudo-1.6.7p5-118.2.i586.rpm
  SUSE Linux 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/sudo-1.6.7p5-118. 2.i586.rpm


• SuSE sudo-1.6.7p5-118.2.x86_64.rpm
  SUSE Linux 9.2:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/sudo-1.6.7p5- 118.2.x86_64.rpm


• SuSE sudo-1.6.7p5-120.i586.rpm
  SUSE Linux 9.0:
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/sudo-1.6.7p5-120. i586.rpm


• SuSE sudo-1.6.7p5-120.x86_64.rpm
  SUSE Linux 9.0:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/sudo-1.6.7p5- 120.x86_64.rpm


• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz


• Ubuntu sudo_1.6.8p5-1ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.1_amd64.deb


• Ubuntu sudo_1.6.8p5-1ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.1_i386.deb

Todd Miller Sudo 1.6.8 p5

• Ubuntu sudo_1.6.8p5-1ubuntu2.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.1_amd64.deb


• Ubuntu sudo_1.6.8p5-1ubuntu2.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.1_i386.deb


• Ubuntu sudo_1.6.8p5-1ubuntu2.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.1_powerpc.deb

Todd Miller Sudo 1.6.8

• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Todd Miller Sudo 1.6.8 p8

• OpenPKG sudo-1.6.8p8-2.4.1.src.rpm
  ftp://ftp.openpkg.org/release/2.4/UPD/sudo-1.6.8p8-2.4.1.src.rpm


• Todd Miller sudo-1.6.8p9.tar.gz
  http://www.sudo.ws/sudo/dist/sudo-1.6.8p9.tar.gz

Apple Mac OS X 10.3

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.1

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.3.1

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.3.2

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.2

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.3.3

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.4

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.5

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.3.5

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.6

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.3.8

• Apple SecUpd2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08840&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.8

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2005-009Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08841&cat= 1&platform=osx&method=sa/

Apple Mac OS X 10.4

• Apple SecUpd2005-009Ti.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08835&cat= 1&platform=osx&method=sa/SecUpd2005-009Ti.dmg

Apple Mac OS X 10.4.2

• Apple SecUpd2005-009Ti.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08835&cat= 1&platform=osx&method=sa/SecUpd2005-009Ti.dmg

Apple Mac OS X Server 10.4.3

• Apple SecUpdSrvr2005-009Ti.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08839&cat= 1&platform=osx&method=sa/SecUpdSrvr2005-009Ti.dmg

Apple Mac OS X 10.4.3

• Apple SecUpd2005-009Ti.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=08835&cat= 1&platform=osx&method=sa/SecUpd2005-009Ti.dmg