Secunia Logo
Netsikker nu! 2008
 
Ubuntu update for sudo
Secunia Advisory: SA15774
Release Date: 2005-06-22
Popularity: 5,301 views

Critical:
Less critical
Impact: Security Bypass
Where: Local system
Solution Status: Vendor Patch

OS:Ubuntu Linux 4.10
Ubuntu Linux 5.04

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-1993


Description:
Ubuntu has issued an update for sudo. This fixes a vulnerability, which can be exploited by malicious, local users to execute arbitrary commands with escalated privileges.

For more information:
SA15744

Solution:
Apply updated packages.

-- Ubuntu 4.10 (Warty Warthog) --

Source archives:

http://security.ubuntu.com/ubuntu/poo.../sudo/sudo_1.6.7p5-1ubuntu4.2.diff.gz
Size/MD5: 19738 c0823e3947f35d25f259e7fd8f16f087
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.7p5-1ubuntu4.2.dsc
Size/MD5: 585 75d7496b2ccc5d4156cf64f7734e4671
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.7p5.orig.tar.gz
Size/MD5: 349785 55d503e5c35bf1ea83d38244e0242aaf

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...udo/sudo_1.6.7p5-1ubuntu4.2_amd64.deb
Size/MD5: 156152 a1b87562400cf5bed227cb36c8f84f89

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...sudo/sudo_1.6.7p5-1ubuntu4.2_i386.deb
Size/MD5: 145582 7bbe9545270debdfbb783470aec52da3

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...o/sudo_1.6.7p5-1ubuntu4.2_powerpc.deb
Size/MD5: 153136 8de2ac3f51917aa5a7f036075567e68d

-- Ubuntu 5.04 (Hoary Hedgehog) --

Source archives:

http://security.ubuntu.com/ubuntu/poo.../sudo/sudo_1.6.8p5-1ubuntu2.1.diff.gz
Size/MD5: 23451 560c7ca527526d804009152f1a64752f
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5-1ubuntu2.1.dsc
Size/MD5: 585 024e53a1dc3320b92c3def3278e93b1b
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.8p5.orig.tar.gz
Size/MD5: 584832 03538d938b8593d6f1d66ec6c067b5b5

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...udo/sudo_1.6.8p5-1ubuntu2.1_amd64.deb
Size/MD5: 170290 b730a59f092cbdf22fc3f0649ec55b7f

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...sudo/sudo_1.6.8p5-1ubuntu2.1_i386.deb
Size/MD5: 158592 6383525dc85c777200a0f90304dfef41

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...o/sudo_1.6.8p5-1ubuntu2.1_powerpc.deb
Size/MD5: 165296 3b4399b3149cde69961cb3a9140671a9

Original Advisory:
http://www.ubuntulinux.org/support/documentation/usn/usn-142-1

Other References:
SA15744:
http://secunia.com/advisories/15744/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 19
New vulnerabilities: 68
Updated advisories: 62

Moderately // 189 views
Debian update for php5
Moderately // 138 views
Atarone CMS Multiple Vulnerabilities
Moderately // 177 views
Debian update for squid
Less // 189 views
SUSE update for mercurial
Moderately // 233 views
SUSE update for openssh
Less // 179 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Debian update for php5 // 63 views
2. SUSE update for openssh // 56 views
3. H-Sphere webshell4 Cross-Site Scripting and Request Forgery // 41 views
4. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 41 views
5. SUSE update for mercurial // 39 views
6. Atarone CMS Multiple Vulnerabilities // 34 views
7. WMNews Cross-Site Scripting Vulnerabilities // 33 views
8. MetaGauge Directory Traversal Vulnerability // 33 views
9. SUSE update for dovecot and graphicsmagic // 33 views
10. HP-UX NFS/ONCplus Denial of Service Vulnerability // 31 views