CVE-2005-2959

Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are.

• CWE-264

• http://docs.info.apple.com/article.html?artnum=305214
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• http://secunia.com/advisories/17318Vendor Advisory
• http://secunia.com/advisories/17322Vendor Advisory
• http://secunia.com/advisories/17345Vendor Advisory
• http://secunia.com/advisories/17390Patch, Vendor Advisory
• http://secunia.com/advisories/17666Vendor Advisory
• http://secunia.com/advisories/18549Vendor Advisory
• http://secunia.com/advisories/24479Vendor Advisory
• http://www.debian.org/security/2005/dsa-870Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:201
• http://www.novell.com/linux/security/advisories/2006_02_sr.html
• http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html
• http://www.securityfocus.com/advisories/9643Vendor Advisory
• http://www.securityfocus.com/bid/15191Exploit
• http://www.sudo.ws/bugs/show_bug.cgi?id=182
• http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0930Vendor Advisory
• https://usn.ubuntu.com/213-1/
• http://docs.info.apple.com/article.html?artnum=305214
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
• http://secunia.com/advisories/17318Vendor Advisory
• http://secunia.com/advisories/17322Vendor Advisory
• http://secunia.com/advisories/17345Vendor Advisory
• http://secunia.com/advisories/17390Patch, Vendor Advisory
• http://secunia.com/advisories/17666Vendor Advisory
• http://secunia.com/advisories/18549Vendor Advisory
• http://secunia.com/advisories/24479Vendor Advisory
• http://www.debian.org/security/2005/dsa-870Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:201
• http://www.novell.com/linux/security/advisories/2006_02_sr.html
• http://www.openpkg.org/security/OpenPKG-SA-2006.002-sudo.html
• http://www.securityfocus.com/advisories/9643Vendor Advisory
• http://www.securityfocus.com/bid/15191Exploit
• http://www.sudo.ws/bugs/show_bug.cgi?id=182
• http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/0930Vendor Advisory
• https://usn.ubuntu.com/213-1/

Published

Oct 25, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2953Cross-site scripting (XSS) vulnerability in merchant.mvc in …
• CVE-2005-2954SQL injection vulnerability in password_reminder.php in ATut…
• CVE-2005-2955config.inc.php in ATutor 1.5.1, and possibly earlier version…
• CVE-2005-2956ATutor 1.5.1, and possibly earlier versions, stores temporar…
• CVE-2005-2957Stack-based buffer overflow in AVIRA Desktop for Windows 1.0…
• CVE-2005-2958Multiple format string vulnerabilities in the GNOME Data Acc…
• CVE-2005-2960cfengine 1.6.5 and 2.1.16 allows local users to overwrite ar…
• CVE-2005-2961Buffer overflow in the get_string_ahref function for ProZill…
• CVE-2005-2962The post-installation script for ntlmaps before 0.9.9 sets w…
• CVE-2005-2963The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apach…
• CVE-2005-2964Stack-based buffer overflow in AbiWord before 2.2.10 allows …
• CVE-2005-2965Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…