CVE-2008-3067

EPSS 0.06%

發布日:2008/7/7修改日:2026/4/28

也稱為:DEBIAN-CVE-2008-3067

描述

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.

受影響套件(1)

Debian/sudofrom 0, < 1.6.9p12-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-3067