Sudo security advisory
Mike Tancsa
mike at sentex.net
Mon Jan 30 15:56:51 UTC 2012
Hi,
http://www.gratisoft.us/sudo/alerts/sudo_debug.html
>From the advisory,
Successful exploitation of the bug will allow a user to run arbitrary
commands as root.
Exploitation of the bug does *not* require that the attacker be listed
in the sudoers file. As such, we strongly suggest that affected sites
upgrade from affected sudo versions as soon as possible.
---Mike
--
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada http://www.tancsa.com/
More information about the freebsd-ports
mailing list