CVE-2009-0034 in Gratisoft and VMware Products
Published on January 30, 2009
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.
Products Associated with CVE-2009-0034
stack.watch emails you whenever new vulnerabilities are published in Gratisoft Sudo or VMware Esx. Just hit a watch button to start following.
Exploit Probability
EPSS
0.05%
Percentile
15.07%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.