Red Hat Security Advisory

RHSA-2012:1149

sudo security and bug fix update

Released 2012-08-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) sudo-1.7.2p1-14.el5_8.2, sudo-1.7.2p1-14.el5_8.2.i386, sudo-1.7.2p1-14.el5_8.2.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) sudo-1.7.2p1-14.el5_8.2, sudo-1.7.2p1-14.el5_8.2.i386

Fixes 1 record

TI-2012-02968 CVE-2012-3440 · GHSA-f2xg-m95q-882q

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local…

LOW 26

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.

CVSS 2.0MEDIUM 5.6 Local No auth Interaction — EPSS 0.00435 Published 2012-08-08 Fixed CWE-59