CVE-2012-2337
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
- Todd Miller Sudo
- = 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3_p7, 1.6.4, 1.6.4p2, 1.6.5, 1.6.6, 1.6.7, 1.6.7p5, 1.6.8, 1.6.8p12, 1.6.9, 1.6.9p20, 1.6.9p21, 1.6.9p22, 1.6.9p23
- Fix
- Available
- CVSS 2.0
- 7.2 HIGH
- EPSS
- 0.4% (33th percentile)
- Weakness
- CWE-264
- NVD status
- Modified
- Published
- 2012-05-18
CVE-2012-2337 at NVD
No indexed exploits for CVE-2012-2337 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2012-2337 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.