{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eToutes les versions de sudo ant\u00e9rieures  \u00e0 la version 1.6.8p12.\u003c/p\u003e",
  "content": "## Description\n\nL\u0027utilitaire sudo permet d\u0027accorder des droits d\u0027administration \u00e0 des\nutilisateurs non privil\u00e9gi\u00e9s du syst\u00e8me.  \nUne vuln\u00e9rabilit\u00e9 de sudo dans la gestion des variables d\u0027environnement\nPERLLIB, PERL5LIB et PERL5OPT permet \u00e0 un utilisateur local d\u0027ex\u00e9cuter\ndes commandes arbitraires.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-12-21T00:00:00",
  "last_revision_date": "2006-01-23T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:234 du 20 d\u00e9cembre    2005 :",
      "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:234"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 sudo :",
      "url": "http://www.sudo.ws/sudo/alerts/perl_env.html"
    },
    {
      "title": "Site Internet de sudo :",
      "url": "http://www.sudo.ws"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-946 du 20 janvier 2006 :",
      "url": "http://www.debian.org/security/2006/dsa-946"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SR:2006:002 du 20 janvier    2006 :",
      "url": "http://www.novell.com/linux/security/advisories/2006o_02_sr.html"
    }
  ],
  "reference": "CERTA-2005-AVI-495",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-12-21T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian.",
      "revision_date": "2006-01-20T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 SUSE.",
      "revision_date": "2006-01-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de commandes arbitraires par des utilisateurs locaux"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 de Sudo",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:234 du 20 d\u00e9cembre 2005",
      "url": null
    }
  ]
}