CVE-2012-2337

NONE EPSS 31.8%

Published May 18, 201214y ago · Modified Jun 16, 20262w ago

Published May 18, 2012 14y ago

Last Modified Jun 16, 2026 2w ago

Description

sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.

Threat Intelligence

EPSS Exploit Probability

31.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-264

Affected Products 19

Vendor	Product	Version	Range
todd_miller	sudo	1.6	any
todd_miller	sudo	1.6.1	any
todd_miller	sudo	1.6.2	any
todd_miller	sudo	1.6.2p3	any
todd_miller	sudo	1.6.3	any
todd_miller	sudo	1.6.3_p7	any
todd_miller	sudo	1.6.4	any
todd_miller	sudo	1.6.4p2	any
todd_miller	sudo	1.6.5	any
todd_miller	sudo	1.6.6	any
todd_miller	sudo	1.6.7	any
todd_miller	sudo	1.6.7p5	any
todd_miller	sudo	1.6.8	any
todd_miller	sudo	1.6.8p12	any
todd_miller	sudo	1.6.9	any
todd_miller	sudo	1.6.9p20	any
todd_miller	sudo	1.6.9p21	any
todd_miller	sudo	1.6.9p22	any
todd_miller	sudo	1.6.9p23	any

References 11

lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081432.html
secunia.com http://secunia.com/advisories/49219
secunia.com http://secunia.com/advisories/49244
secunia.com http://secunia.com/advisories/49291
secunia.com http://secunia.com/advisories/49948
debian.org http://www.debian.org/security/2012/dsa-2478
mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2012:079
securitytracker.com http://www.securitytracker.com/id?1027077
sudo.ws http://www.sudo.ws/sudo/alerts/netmask.html

Vendor Advisory
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=820677
suse.com https://www.suse.com/security/cve/CVE-2012-2337/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.