[ GLSA 201207-01 ] sudo: Privilege escalation

[GLSA]

Gentoo Linux Security Advisory

Title: sudo: Privilege escalation (GLSA 201207-01)
Severity: high
Exploitable: local
Date: July 09, 2012
Bug(s): #416281
ID: 201207-01

Synopsis

A vulnerability has been found in sudo which may allow local users
to gain escalated privileges.


Background

sudo allows a system administrator to give users the ability to run
commands as other users. Access to commands may also be granted on a
range to hosts.


Affected Packages

Package: app-admin/sudo
Vulnerable: < 1.8.5_p1
Unaffected: >= 1.8.5_p1
Architectures: All supported architectures


Description

An error in sudo may allow unintended IPv4 hosts to be granted access to
commands.


Impact

A local attacker could gain escalated privileges.

Workaround

There is no known workaround at this time.

Resolution

All sudo users should upgrade to the latest version: