Approved changes feed: RSS · Atom

cpe:2.3:a:todd_miller:sudo:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

VendorTodd Miller (6e64c61d-ae67-5a3c-a0c7-5a9c304d6f92)
ProductSudo (ffec71ae-72fb-5429-b6f7-5160d870c451)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/millert/sudo purl2cpe 2026-06-01 10:15:50.039742
pkg:deb/debian/sudo purl2cpe 2026-06-01 10:15:50.039744
pkg:deb/ubuntu/sudo purl2cpe 2026-06-01 10:15:50.039746
pkg:github/millert/sudo purl2cpe 2026-06-01 10:15:50.039748
pkg:github/sudo-project/sudo purl2cpe 2026-06-01 10:15:50.039749
pkg:gitlab/redhat/sudo purl2cpe 2026-06-01 10:15:50.039751
pkg:rpm/fedora/sudo purl2cpe 2026-06-01 10:15:50.039753
pkg:rpm/opensuse/sudo purl2cpe 2026-06-01 10:15:50.039755

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0008 vulnerable 2026-06-08 04:56:32.975083 Details available
A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.
Published: 2011-01-20T18:00:00.000Z
Updated: 2024-08-06T21:36:02.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1496 vulnerable 2026-06-08 04:44:58.327004 Details available
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
Published: 2001-09-12T04:00:00.000Z
Updated: 2024-08-01T17:18:07.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0958 vulnerable 2026-06-08 04:44:58.169985 Details available
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
Published: 2000-04-18T04:00:00.000Z
Updated: 2024-08-01T16:55:29.316Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.