VDB
CVE-2012-0809
CVE-2012-0809
PUBLISHED
CVSS 7.199999809265137 HIGH
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
EPSS 2.99% · 86.0th percentile
Risk Scores
CVSS 2.0
7.199999809265137
EPSS Score
2.99%
86.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| todd_miller | sudo | 1.8.1, 1.8.1p1, 1.8.1p2 |
| n/a | n/a | n/a |
Timeline
- Feb 1, 2012 CVE Published
- May 1, 2013 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score