Read the docs
TI-2005-03913 Aliases CVE-2005-4158GHSA-h6pw-5prw-wv25

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB…

Priority LOW 23Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Why it matters now

EPSS 0.01077 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 30

CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:*1.5.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*1.5.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:*1.5.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:*1.5.9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*1.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*1.6.3_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*1.6.3_p2VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:* Versions 1.6.3_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:* Versions 1.6.3_p2 Vulnerable ·Todd Miller
Show 20 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*1.6.3_p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*1.6.3_p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*1.6.3_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*1.6.3_p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*1.6.3_p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*1.6.4_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*1.6.4_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*1.6.5_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*1.6.5_p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*1.6.7_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*1.6.8_p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*1.6.8_p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*1.6.8_p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*1.6.8_p8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*1.6.8_p9VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:* Versions 1.6.3_p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:* Versions 1.6.3_p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:* Versions 1.6.3_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:* Versions 1.6.3_p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:* Versions 1.6.3_p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:* Versions 1.6.4_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:* Versions 1.6.4_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:* Versions 1.6.5_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:* Versions 1.6.5_p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:* Versions 1.6.7_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:* Versions 1.6.8_p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:* Versions 1.6.8_p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:* Versions 1.6.8_p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:* Versions 1.6.8_p8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:* Versions 1.6.8_p9 Vulnerable ·Todd Miller

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-4158
  2. 2026-10-03 Alias added: GHSA-h6pw-5prw-wv25

References

Patch 1

Advisory 6

Other 1

  • TI-2005-01738 Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local… CVSS 3.1HIGH 8.4
  • TI-2012-00746 Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1… CVSS 2.0HIGH 7.2
  • TI-2013-01562 sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or… CVSS 2.0MEDIUM 6.9
  • TI-2004-00948 sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style… CVSS 2.0HIGH 7.2
  • TI-2010-00404 sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled… CVSS 2.0MEDIUM 6.9
  • TI-2006-00144 sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable… CVSS 2.0HIGH 7.2
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences