{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003esudo versions 1.6.8p8 et ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nL\u0027utilitaire sudo permet d\u0027accorder des droits d\u0027administration \u00e0 des\nutilisateurs non privil\u00e9gi\u00e9s du syst\u00e8me. Une vuln\u00e9rabilit\u00e9 permet \u00e0 un\nutilisateur local mal intentionn\u00e9 de contourner la politique de s\u00e9curit\u00e9\ndu syst\u00e8me.\n\n## Solution\n\nLa version 1.6.8p9 corrige le probl\u00e8me. Elle est disponible sur ce site\n:\n\n    http://www.sudo.ws\n",
  "cves": [],
  "initial_release_date": "2005-06-21T00:00:00",
  "last_revision_date": "2005-07-01T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-735 du 01 juillet 2005 :",
      "url": "http://www.debian.org/security/2005/dsa-735"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:535 du 29 juin 2005 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-535.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 OpenBSD relatif \u00e0 sudo :",
      "url": "http://www.openbsd.org/errata.html#sudo"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SA:2005:036 du 24 juin 2005    :",
      "url": "http://www.novell.com/linux/security/advisories/2005_36_sudo.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:103 du 21 juin    2005 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:103"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 pour Fedora Core 3 du 21 juin 2005    :",
      "url": "http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de sudo :",
      "url": "http://www.sudo.ws/sudo/alerts/path_race.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 FreeBSD du 20 juin 2005 relatif \u00e0 sudo    :",
      "url": "http://www.vuxml.org/freebsd/"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 pour Fedora Core 4 du 12 juin 2005    :",
      "url": "http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200506-22 du 23 juin 2005    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200506-22.xml"
    }
  ],
  "reference": "CERTA-2005-AVI-226",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-06-21T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo.",
      "revision_date": "2005-06-23T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 SUSE.",
      "revision_date": "2005-06-28T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 RedHat.",
      "revision_date": "2005-06-30T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian.",
      "revision_date": "2005-07-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 dans l\u0027utilitaire sudo",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 sudo",
      "url": null
    }
  ]
}