CVE-2004-1051
No CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- mandrakesoft:mandrake_linux
- mandrakesoft:mandrake_linux_corporate_server
- mandrakesoft:mandrake_multi_network_firewall
- todd_miller:sudo
- trustix:secure_linux
- ubuntu:ubuntu_linux