• info
• discussion
• exploit
• solution
• references

Sudo Python Environment Variable Handling Security Bypass Vulnerability

An exploit is not required. Example exploit code has been provided by breno@kalangolinux.org:

• /data/vulnerabilities/exploits/sudo_local_perl_root.txt
• /data/vulnerabilities/exploits/sudo_local_python_exploit.txt