VDB
CVE-2006-0151
CVE-2006-0151
PUBLISHED
CVSS 7.199999809265137 HIGH
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
EPSS 0.61% · 48.6th percentile
Risk Scores
CVSS 2.0
7.199999809265137
EPSS Score
0.61%
48.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| todd_miller | sudo | *, 1.6.8_p7, 1.6.8_p8 |
| ubuntu | ubuntu_linux | 4.1, 5.04, 5.04 |
| n/a | n/a | * |
Timeline
- Jan 9, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 30, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 16, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 15, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 2, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
References
- SUSE-SR:2006:002 vendor-advisory
- 19016 third-party-advisory
- 18549 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2006-0151 advisory
- https://usn.ubuntu.com/235-2 url
- http://secunia.com/advisories/18363 url
- http://secunia.com/advisories/18558 url
- http://secunia.com/advisories/18906 url
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:159 url
- http://secunia.com/advisories/18358 advisory
- http://secunia.com/advisories/21692 technical
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822 technical
- http://www.debian.org/security/2006/dsa-946 technical
- http://www.securityfocus.com/bid/16184 exploit
- http://www.trustix.org/errata/2006/0010 technical
- https://usn.ubuntu.com/235-2/ technical