• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Todd Miller Sudo Local Privilege Escalation Vulnerability

Solution:
Please see the referenced vendor advisories for more information and fixes.


Todd Miller Sudo 1.6.4

• Mandriva sudo-1.6.7-0.p5.2.3.M20mdk.i586.rpm
  Multi Network Firewall 2.0:
  http://www1.mandrivalinux.com/en/ftp.php3

Todd Miller Sudo 1.6.6

• Mandriva sudo-1.6.6-2.3.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.6-2.3.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.8p1-1.3.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3

Todd Miller Sudo 1.6.7 p5

• Conectiva sudo-1.6.8p9-42425U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/sudo-1.6.8p9-42425U10_2cl. i386.rpm


• Conectiva sudo-doc-1.6.8p9-42425U10_2cl.i386.rpm
  Version:10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/sudo-doc-1.6.8p9-42425U10_ 2cl.i386.rpm


• Ubuntu sudo_1.6.7p5-1ubuntu4.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.7p5-1ubunt u4.3_amd64.deb


• Ubuntu sudo_1.6.7p5-1ubuntu4.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.7p5-1ubunt u4.3_i386.deb


• Ubuntu sudo_1.6.7p5-1ubuntu4.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.7p5-1ubunt u4.3_powerpc.deb

Todd Miller Sudo 1.6.7

• Mandriva sudo-1.6.7-0.p5.2.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.7-0.p5.2.3.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Todd Miller Sudo 1.6.8 p9

• Trustix sudo-1.6.8p9-2tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Ubuntu sudo_1.6.8p9-2ubuntu2.1_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p9-2ubunt u2.1_amd64.deb


• Ubuntu sudo_1.6.8p9-2ubuntu2.1_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p9-2ubunt u2.1_i386.deb


• Ubuntu sudo_1.6.8p9-2ubuntu2.1_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p9-2ubunt u2.1_powerpc.deb

Todd Miller Sudo 1.6.8 p5

• Ubuntu sudo_1.6.8p5-1ubuntu2.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.2_amd64.deb


• Ubuntu sudo_1.6.8p5-1ubuntu2.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.2_i386.deb


• Ubuntu sudo_1.6.8p5-1ubuntu2.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubunt u2.2_powerpc.deb

Todd Miller Sudo 1.6.8 p8

• Mandriva sudo-1.6.8p8-2.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.8p8-2.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• OpenPKG sudo-1.6.8p8-2.4.1.src.rpm
  ftp://ftp.openpkg.org/release/2.4/UPD/sudo-1.6.8p8-2.4.1.src.rpm

Todd Miller Sudo 1.6.8 p1

• Mandriva sudo-1.6.8p1-1.3.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.8p1-1.3.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.8p1-2.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva sudo-1.6.8p1-2.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• OpenPKG sudo-1.6.8p1-2.2.2.src.rpm
  ftp://ftp.openpkg.org/release/2.2/UPD/sudo-1.6.8p1-2.2.2.src.rpm

Todd Miller Sudo 1.6.8 p7

• OpenPKG sudo-1.6.8p7-2.3.1.src.rpm
  ftp://ftp.openpkg.org/release/2.3/UPD/sudo-1.6.8p7-2.3.1.src.rpm

Apple Mac OS X Server 10.3.9

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.3.9

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.3

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.5

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.6

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.7

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.7

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/