Todd Miller Sudo 'sudoedit' Path Resolution Local Privilege Escalation Vulnerability

Todd Miller Sudo 'sudoedit' Path Resolution Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Ubuntu Ubuntu Linux 9.10 sparc

Ubuntu sudo-ldap_1.7.0-1ubuntu2.2_sparc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 2_sparc.deb

Ubuntu sudo_1.7.0-1ubuntu2.2_sparc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.2_sparc.d eb

Slackware Linux 12.0

Slackware sudo-1.7.2p6-i486-1_slack12.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ sudo-1.7.2p6-i486-1_slack12.0.tgz

Slackware Linux -current

Slackware sudo-1.7.2p6-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/s udo-1.7.2p6-i486-1.txz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

Ubuntu sudo_1.6.9p10-1ubuntu3.7_powerpc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.7_powe rpc.deb

Ubuntu sudo-ldap_1.6.9p10-1ubuntu3.7_powerpc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubunt u3.7_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

Ubuntu sudo_1.6.9p17-1ubuntu2.3_powerpc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.3_powe rpc.deb

Ubuntu sudo-ldap_1.6.9p17-1ubuntu2.3_powerpc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u2.3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

Ubuntu sudo_1.6.9p10-1ubuntu3.7_sparc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.7_spar c.deb

Ubuntu sudo-ldap_1.6.9p10-1ubuntu3.7_sparc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubunt u3.7_sparc.deb

Slackware Linux 12.2

Slackware sudo-1.7.2p6-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ sudo-1.7.2p6-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 9.10 powerpc

Ubuntu sudo-ldap_1.7.0-1ubuntu2.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 2_powerpc.deb

Ubuntu sudo_1.7.0-1ubuntu2.2_powerpc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.2_powerpc .deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

Ubuntu sudo-ldap_1.6.8p12-1ubuntu6.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.8 p12-1ubuntu6.2_sparc.deb

Ubuntu sudo_1.6.8p12-1ubuntu6.2_sparc.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p12-1ubun tu6.2_sparc.deb

MandrakeSoft Linux Mandrake 2008.0 x86_64

Mandriva sudo-1.6.9p5-1.3mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

Ubuntu sudo-ldap_1.6.9p10-1ubuntu3.7_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p10-1ubuntu3.7_amd64.deb

Ubuntu sudo_1.6.9p10-1ubuntu3.7_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubun tu3.7_amd64.deb

MandrakeSoft Linux Mandrake 2008.0

Mandriva sudo-1.6.9p5-1.3mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.10 lpia

Ubuntu sudo-ldap_1.7.0-1ubuntu2.2_lpia.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 2_lpia.deb

Ubuntu sudo_1.7.0-1ubuntu2.2_lpia.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.2_lpia.de b

Ubuntu Ubuntu Linux 9.04 sparc

Ubuntu sudo_1.6.9p17-1ubuntu3.2_sparc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu3.2_spar c.deb

Ubuntu sudo-ldap_1.6.9p17-1ubuntu3.2_sparc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u3.2_sparc.deb

MandrakeSoft Linux Mandrake 2010.0

Mandriva sudo-1.7.2-0.p1.1.2mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 powerpc

Ubuntu sudo-ldap_1.6.9p17-1ubuntu3.2_powerpc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u3.2_powerpc.deb

Ubuntu sudo_1.6.9p17-1ubuntu3.2_powerpc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu3.2_powe rpc.deb

Slackware Linux 12.1

Slackware sudo-1.7.2p6-i486-1_slack12.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ sudo-1.7.2p6-i486-1_slack12.1.tgz

Ubuntu Ubuntu Linux 9.04 i386

Ubuntu sudo-ldap_1.6.9p17-1ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p17-1ubuntu3.2_i386.deb

Ubuntu sudo_1.6.9p17-1ubuntu3.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubun tu3.2_i386.deb

Ubuntu Ubuntu Linux 9.04 lpia

Ubuntu sudo-ldap_1.6.9p17-1ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u3.2_lpia.deb

Ubuntu sudo_1.6.9p17-1ubuntu3.2_lpia.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu3.2_lpia .deb

Ubuntu Ubuntu Linux 8.10 sparc

Ubuntu sudo-ldap_1.6.9p17-1ubuntu2.3_sparc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u2.3_sparc.deb

Ubuntu sudo_1.6.9p17-1ubuntu2.3_sparc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.3_spar c.deb

Ubuntu Ubuntu Linux 9.10 i386

Ubuntu sudo-ldap_1.7.0-1ubuntu2.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.7.0 -1ubuntu2.2_i386.deb

Ubuntu sudo_1.7.0-1ubuntu2.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.7.0-1ubuntu2 .2_i386.deb

Ubuntu Ubuntu Linux 9.10 amd64

Ubuntu sudo-ldap_1.7.0-1ubuntu2.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.7.0 -1ubuntu2.2_amd64.deb

Ubuntu sudo_1.7.0-1ubuntu2.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.7.0-1ubuntu2 .2_amd64.deb

MandrakeSoft Linux Mandrake 2009.0 x86_64

Mandriva sudo-1.6.9p17-1.4mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 amd64

Ubuntu sudo_1.6.9p17-1ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubun tu3.2_amd64.deb

Ubuntu sudo-ldap_1.6.9p17-1ubuntu3.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p17-1ubuntu3.2_amd64.deb

MandrakeSoft Linux Mandrake 2009.1

Mandriva sudo-1.7.0-1.4mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

Ubuntu sudo_1.6.9p17-1ubuntu2.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubun tu2.3_amd64.deb

Ubuntu sudo-ldap_1.6.9p17-1ubuntu2.3_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p17-1ubuntu2.3_amd64.deb

Slackware Linux x86_64 -current

Slackware sudo-1.7.2p6-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ ap/sudo-1.7.2p6-x86_64-1.txz

MandrakeSoft Linux Mandrake 2009.1 x86_64

Mandriva sudo-1.7.0-1.4mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 i386

Ubuntu sudo-ldap_1.6.9p17-1ubuntu2.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p17-1ubuntu2.3_i386.deb

Ubuntu sudo_1.6.9p17-1ubuntu2.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubun tu2.3_i386.deb

MandrakeSoft Enterprise Server 5 x86_64

Mandriva sudo-1.6.9p17-1.4mdvmes5.1.x86_64.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 6.06 LTS powerpc

Ubuntu sudo_1.6.8p12-1ubuntu6.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p12-1ubun tu6.2_powerpc.deb

Ubuntu sudo-ldap_1.6.8p12-1ubuntu6.2_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.8 p12-1ubuntu6.2_powerpc.deb

MandrakeSoft Enterprise Server 5

Mandriva sudo-1.6.9p17-1.4mdvmes5.1.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu sudo_1.6.9p10-1ubuntu3.7_lpia.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.7_lpia .deb

Ubuntu sudo-ldap_1.6.9p10-1ubuntu3.7_lpia.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubunt u3.7_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu sudo_1.6.8p12-1ubuntu6.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p12-1ubun tu6.2_i386.deb

Ubuntu sudo-ldap_1.6.8p12-1ubuntu6.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.8 p12-1ubuntu6.2_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

Ubuntu sudo-ldap_1.6.9p17-1ubuntu2.3_lpia.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubunt u2.3_lpia.deb

Ubuntu sudo_1.6.9p17-1ubuntu2.3_lpia.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.3_lpia .deb

Slackware Linux 13.0 x86_64

Slackware sudo-1.7.2p6-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/sudo-1.7.2p6-x86_64-1_slack13.0.txz

Ubuntu Ubuntu Linux 6.06 LTS amd64

Ubuntu sudo_1.6.8p12-1ubuntu6.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p12-1ubun tu6.2_amd64.deb

Ubuntu sudo-ldap_1.6.8p12-1ubuntu6.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.8 p12-1ubuntu6.2_amd64.deb

MandrakeSoft Linux Mandrake 2010.0 x86_64

Mandriva sudo-1.7.2-0.p1.1.2mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0

Mandriva sudo-1.6.9p17-1.4mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/

Slackware Linux 13.0

Slackware sudo-1.7.2p6-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ sudo-1.7.2p6-i486-1_slack13.0.txz

MandrakeSoft Corporate Server 4.0

Mandriva sudo-1.6.8p8-2.5.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu sudo_1.6.9p10-1ubuntu3.7_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubun tu3.7_i386.deb

Ubuntu sudo-ldap_1.6.9p10-1ubuntu3.7_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9 p10-1ubuntu3.7_i386.deb

Slackware Linux 10.0

Slackware sudo-1.7.2p6-i486-1_slack10.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ sudo-1.7.2p6-i486-1_slack10.0.tgz

Slackware Linux 10.1

Slackware sudo-1.7.2p6-i486-1_slack10.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ sudo-1.7.2p6-i486-1_slack10.1.tgz

Slackware Linux 10.2

Slackware sudo-1.7.2p6-i486-1_slack10.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ sudo-1.7.2p6-i486-1_slack10.2.tgz

MandrakeSoft Corporate Server 4.0 x86_64

Mandriva sudo-1.6.8p8-2.5.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/

Slackware Linux 8.1

Slackware sudo-1.7.2p6-i386-1_slack8.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/s udo-1.7.2p6-i386-1_slack8.1.tgz

Slackware Linux 9.0

Slackware sudo-1.7.2p6-i386-1_slack9.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/s udo-1.7.2p6-i386-1_slack9.0.tgz

Slackware Linux 9.1

Slackware sudo-1.7.2p6-i486-1_slack9.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/s udo-1.7.2p6-i486-1_slack9.1.tgz