Description
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-946-1 | New sudo packages fix privilege escalation |
Debian DSA |
DSA-946-2 | New sudo packages fix privilege escalation |
EUVD |
EUVD-2006-0159 | sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158. |
References
History
Wed, 28 May 2025 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Thu, 22 May 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T16:25:33.651Z
Reserved: 2006-01-09T00:00:00.000Z
Link: CVE-2006-0151
No data.
Status : Modified
Published: 2006-01-09T23:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-0151
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD