Debian/sudo: unknown

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.

Action: Upgrade sudo to 1.6.8p12-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-0151
• https://security-tracker.debian.org/tracker/CVE-2006-0151

published 2006-01-09T23:03:00Z · modified 2026-10-22T23:47:20.314539919Z · JSON