CVE-2012-0809

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.93% chance of exploitation in the next 30 days, 87th percentile

Published

2012-02-01

Updated

2024-08-06

Proof-of-concept exploits (1)

• Hanc1999/System-Security-Exploit-Practice3★ · 2022-06-16

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/25134
• https://www.exploit-db.com/exploits/18436

Security advisories

• http://www.sudo.ws/sudo/alerts/sudo_debug.html

References

• CVE Record
• NVD entry

Related

• CVE-2002-1904