CVE-2006-0151
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows...
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
Exploit likelihood
What each source reports
NVD Score used
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
CVE-2006-0151- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
CVE-2006-0151- Updated
- 2026-11-02
EUVDEUVD-2006-0159 No score
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
EUVD-2006-0159- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7vx7-4r5w-mwxw No score
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows...
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
GHSA-7vx7-4r5w-mwxw- Updated
- 2026-11-02
OSV No score
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
CVE-2006-0151- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0151 No score
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
- Record
DEBIAN-CVE-2006-0151- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoDebian:12 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:13 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:14 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:3.0 From an advisory covering 2 CVEs |
before 1.6.6-1.6, plus listed versions 1.6.6-1.31.6.6-1.3woody11.6.6-1.41.6.6-1.5 |
1.6.6-1.6 |
sudoDebian:3.1 From an advisory covering 2 CVEs |
before 1.6.8p7-1.4, plus listed versions 1.6.8p7-1.11.6.8p7-1.1sarge11.6.8p7-1.21.6.8p7-1.3 |
1.6.8p7-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0151 is a high vulnerability (CVSS 7.2) in Todd Miller Sudo, published January 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in sudo 1.6.8p12-1.
References
trustix.org/errata/2006/0010
secunia.com/advisories/18549
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822
novell.com/linux/security/advisories/2006_02_sr.html
Show 11 moreShow less
securityfocus.com/bid/16184
debian.org/security/2006/dsa-946
mandriva.com/security/advisories?name=MDKSA-2006:159
usn.ubuntu.com/235-2
nvd.nist.gov/vuln/detail/CVE-2006-0151
github.com/advisories/GHSA-7vx7-4r5w-mwxw
security-tracker.debian.org/tracker/CVE-2006-0151