CVE-2012-0809

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.99% chance of exploitation in the next 30 days, 86th percentile

Published

2012-02-01

Updated

2024-08-06

Proof-of-concept exploits (1)

• Hanc1999/System-Security-Exploit-Practice3★ · 2022-06-16

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/25134
• https://www.exploit-db.com/exploits/18436

References

• CVE Record
• NVD entry

Related

• CVE-2002-1904
• CVE-2012-0805
• CVE-2012-0830
• CVE-2012-0789
• CVE-2012-0834
• CVE-2012-0788