High severity7.8NVD Advisory· Published May 16, 2002· Updated Jun 16, 2026
CVE-2002-0184
CVE-2002-0184
Description
Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
14- marc.infonvdMailing ListPatch
- marc.infonvdMailing ListPatch
- www.linuxsecurity.com/advisories/other_advisory-2040.htmlnvdBroken LinkPatchVendor Advisory
- distro.conectiva.com.br/atualizacoes/nvdBroken LinkThird Party Advisory
- www.debian.org/security/2002/dsa-128nvdBroken LinkThird Party Advisory
- www.kb.cert.org/vuls/id/820083nvdThird Party AdvisoryUS Government Resource
- www.redhat.com/support/errata/RHSA-2002-071.htmlnvdBroken LinkThird Party Advisory
- www.redhat.com/support/errata/RHSA-2002-072.htmlnvdBroken LinkThird Party Advisory
- www.securityfocus.com/bid/4593nvdBroken LinkThird Party AdvisoryVDB Entry
- marc.infonvdMailing List
- marc.infonvdMailing List
- www.iss.net/security_center/static/8936.phpnvdBroken Link
- www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3nvdBroken Link
- www.novell.com/linux/security/advisories/2002_014_sudo_txt.htmlnvdBroken Link
News mentions
0No linked articles in our index yet.