{"id":"CVE-2005-1831","aliases":["BELL-CVE-2005-1831","EUVD-2005-1833","GHSA-jf55-3j9h-grf2"],"status":"disputed","title":"** DISPUTED **  Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows...","description":"Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00405,"percentile":0.35001,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-05-31T04:00:00Z","modified":"2026-06-16T22:13:46Z","products":[{"vendor":"todd_miller","product":"sudo"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=111755694008928\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.osvdb.org/20417","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1831"},{"url":"https://github.com/advisories/GHSA-jf55-3j9h-grf2"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2005-1831","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-1831","description":"Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.","status":"disputed","published":"2005-06-02T04:00:00Z","modified":"2025-01-16T19:09:52.691Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1833","description":"Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.","status":"published","published":"2005-06-02T04:00:00Z","modified":"2025-01-16T19:09:52Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:18.077485Z"}],"ghsa":[{"id":"GHSA-jf55-3j9h-grf2","title":"** DISPUTED **  Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows...","description":"** DISPUTED **  Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.\"","status":"published","published":"2022-05-01T02:02:23Z","modified":"2025-01-16T21:30:54Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:59:34.007286Z"}],"nvd":[{"id":"CVE-2005-1831","description":"Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating \"Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.","status":"disputed","published":"2005-05-31T04:00:00Z","modified":"2026-06-16T22:13:46.187Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.600202Z"}],"osv":[{"id":"BELL-CVE-2005-1831","title":"CVE-2005-1831 does not affect BellSoft software","status":"withdrawn","published":"2005-05-31T04:00:00Z","modified":"2026-01-26T09:46:31.05848Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.886815Z"}]}}