CVE-2014-0106

Published: Mar 11, 2014Modified: May 6, 2026

6.6

Vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 2.7 / Impact: 10.0

Source: NVD

Description

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.

Affected (59)

Products: Apple: Mac Os X · Todd Miller: Sudo

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.10.4

Configuration B

58 vulnerable

Vulnerable Software	Affected Versions
Todd Miller Sudo	Version 1.6.9
Todd Miller Sudo	Version 1.6.9p20
Todd Miller Sudo	Version 1.6.9p21
Todd Miller Sudo	Version 1.6.9p22
Todd Miller Sudo	Version 1.6.9p23
Todd Miller Sudo	Version 1.7.0
Todd Miller Sudo	Version 1.7.10
Todd Miller Sudo	Version 1.7.10p10
Todd Miller Sudo	Version 1.7.10p1
Todd Miller Sudo	Version 1.7.10p2
Todd Miller Sudo	Version 1.7.10p3
Todd Miller Sudo	Version 1.7.10p4
Todd Miller Sudo	Version 1.7.10p5
Todd Miller Sudo	Version 1.7.10p6
Todd Miller Sudo	Version 1.7.10p7
Todd Miller Sudo	Version 1.7.10p8
Todd Miller Sudo	Version 1.7.10p9
Todd Miller Sudo	Version 1.7.1
Todd Miller Sudo	Version 1.7.2
Todd Miller Sudo	Version 1.7.2p1
Todd Miller Sudo	Version 1.7.2p2
Todd Miller Sudo	Version 1.7.2p3
Todd Miller Sudo	Version 1.7.2p4
Todd Miller Sudo	Version 1.7.2p5
Todd Miller Sudo	Version 1.7.2p6
Todd Miller Sudo	Version 1.7.2p7
Todd Miller Sudo	Version 1.7.3b1
Todd Miller Sudo	Version 1.7.4
Todd Miller Sudo	Version 1.7.4p1
Todd Miller Sudo	Version 1.7.4p2
Todd Miller Sudo	Version 1.7.4p3
Todd Miller Sudo	Version 1.7.4p4
Todd Miller Sudo	Version 1.7.4p5
Todd Miller Sudo	Version 1.7.4p6
Todd Miller Sudo	Version 1.7.5
Todd Miller Sudo	Version 1.7.6
Todd Miller Sudo	Version 1.7.6p1
Todd Miller Sudo	Version 1.7.6p2
Todd Miller Sudo	Version 1.7.7
Todd Miller Sudo	Version 1.7.8
Todd Miller Sudo	Version 1.7.8p1
Todd Miller Sudo	Version 1.7.8p2
Todd Miller Sudo	Version 1.7.9
Todd Miller Sudo	Version 1.7.9p1
Todd Miller Sudo	Version 1.8.0
Todd Miller Sudo	Version 1.8.1
Todd Miller Sudo	Version 1.8.1p1
Todd Miller Sudo	Version 1.8.1p2
Todd Miller Sudo	Version 1.8.2
Todd Miller Sudo	Version 1.8.3
Todd Miller Sudo	Version 1.8.3p1
Todd Miller Sudo	Version 1.8.3p2
Todd Miller Sudo	Version 1.8.4
Todd Miller Sudo	Version 1.8.4p1
Todd Miller Sudo	Version 1.8.4p2
Todd Miller Sudo	Version 1.8.4p3
Todd Miller Sudo	Version 1.8.4p4
Todd Miller Sudo	Version 1.8.4p5