Security bugfix for package sudo
(Last modified: 08JAN2002)
solutions Security bugfix for package sudo SuSE Linux Maintenance Web (5965659ee9893fccfd0aee4b4d6c36d0)
SuSE Linux Enterprise Server 7 for IA32
SuSE Linux Enterprise Server 7 for IA64
SuSE Firewall Adminhost VPN
SuSE Linux Connectivity Server
Architecture: i386, ia64
sudosends an email to the sysadmin about an unsuccessful effort to gain elevated privileges, users were able to pass environment variables along with the
execve()system call when
sendmailis called. The call for
root, which allows a local attacker to gain
sudois installed with
setuid-rootpermissions. The update package corrects this error by running
rpm -Uvh sudo.rpm
Download Source Packages
Download the source code of the patches for maintained products.
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.