The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-10-10T16:00:00

Updated: 2024-08-06T08:13:32.035Z

Reserved: 2015-11-18T00:00:00

Link: CVE-2015-8239

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2017-10-10T16:29:00.557

Modified: 2017-11-05T21:23:16.497

Link: CVE-2015-8239

cve-icon Redhat

Severity : Moderate

Publid Date: 2015-11-09T00:00:00Z

Links: CVE-2015-8239 - Bugzilla