Todd Miller Sudo 'Runas_Alias' Supplementary Group Local Privilege Escalation Vulnerability

Todd Miller Sudo 'Runas_Alias' Supplementary Group Local Privilege Escalation Vulnerability

References:

Bug 468923 - VUL-0: sudo: root leak in sudo/sudoers (Harald Koenig)
Diff for /sudo/parse.c between version 1.160.2.21 and 1.160.2.22 (Todd Miller)
OpenBSD 4.3 Errata Page (OpenBSD)
OpenBSD 4.4 release errata & patch list (OpenBSD)
Sudo Homepage (Sudo)
sudo root privilege escalation with some configurations CVE-2009-0034 (Michael K. Johnson)

Privacy Statement
Copyright 2010, SecurityFocus