Todd Miller Sudo vulnerabilities

• todd miller sudo sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec... CVE-2016-7032 Fix available 7.0 HighNovember 14, 2016
• todd miller sudo, apple mac os x +1 more Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment... CVE-2014-0106 Fix available 6.6 MediumMarch 11, 2014
• todd miller sudo, apple mac os x +1 more sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not... CVE-2013-2777 Fix available 4.4 MediumMarch 9, 2013
• todd miller sudo, apple mac os x +1 more sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or... CVE-2013-2776 Fix available 4.4 MediumMarch 9, 2013
• todd miller sudo, apple mac os x +1 more sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does... CVE-2013-1776 Fix available 4.4 MediumMarch 9, 2013
• todd miller sudo, apple mac os x +1 more sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically... CVE-2013-1775 Public exploitFix available 6.9 MediumMarch 4, 2013
• redhat enterprise linux, todd miller sudo +1 more A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users... CVE-2012-3440 Fix available 5.6 MediumAugust 8, 2012
• todd miller sudo sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support... CVE-2012-2337 Fix available 7.2 HighMay 18, 2012
• todd miller sudo Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local... CVE-2012-0809 Public exploitFix available 7.2 HighFebruary 1, 2012
• todd miller sudo A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly... CVE-2011-0008 6.9 MediumJanuary 20, 2011
• todd miller sudo check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a... CVE-2011-0010 Fix available 4.4 MediumJanuary 18, 2011
• todd miller sudo Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the... CVE-2010-2956 Fix available 6.2 MediumSeptember 10, 2010
• todd miller sudo The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does... CVE-2010-1646 Fix available 6.2 MediumJune 7, 2010
• todd miller sudo The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a... CVE-2010-1163 Fix available 6.9 MediumApril 16, 2010
• todd miller sudo sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group... CVE-2010-0427 Fix available 4.4 MediumFebruary 25, 2010
• todd miller sudo sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a... CVE-2010-0426 Public exploitFix available 6.9 MediumFebruary 24, 2010
• sysjail, systrace, todd miller sudo +2 more Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on... CVE-2007-4305 Public exploit 6.2 MediumAugust 13, 2007
• mit kerberos 5, todd miller sudo +1 more sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can... CVE-2007-3149 7.2 HighJune 11, 2007
• todd miller sudo, ubuntu linux +1 more sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows... CVE-2006-0151 Fix available 7.2 HighJanuary 9, 2006
• todd miller sudo Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2)... CVE-2005-4158 Public exploitFix available 4.6 MediumDecember 11, 2005
• todd miller sudo Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain... CVE-2005-2959 Fix available 4.6 MediumOctober 25, 2005
• todd miller sudo Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user... CVE-2005-1993 Fix available 3.7 LowJune 20, 2005
• todd miller sudo ** DISPUTED ** Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows... CVE-2005-1831 Disputed 7.2 HighMay 31, 2005
• todd miller sudo Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack... CVE-2005-1119 2.1 LowApril 16, 2005
• todd miller sudo, debian linux, mandrakesoft mandrake linux +3 more +5 more sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style... CVE-2004-1051 Fix available 7.2 HighNovember 18, 2004
• todd miller sudo sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows... CVE-2004-1689 Public exploitFix available 2.1 LowSeptember 16, 2004
• todd miller sudo sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail... CVE-2002-0043 Public exploit 7.2 HighJanuary 31, 2002
• debian linux, todd miller sudo +1 more Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of... CVE-1999-1496 2.1 LowJune 8, 1999
• todd miller sudo sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. CVE-1999-0958 7.2 HighJanuary 12, 1998