Package: sudo
Version: 1.6.9p17-2+lenny1
Severity: important

When invoking sudo with -u, passing an invalid (or valid but not
matching/existing) UID value, it segfaults.

r...@pepper:~# sudo -u \#-1
Segmentation fault
r...@pepper:~#


Please ensure this is not a security issue.


Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/2 CPU cores)
Shell: /bin/sh linked to /bin/bash

> # dpkg -l libc6 libpam-modules libpam0g
> Desired=Unknown/Install/Remove/Purge/Hold
> | Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
> |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: 
> uppercase=bad)
> ||/ Name                                   Version                            
>     
> +++-======================================-======================================-
> ii  libc6                                  2.7-18lenny2                       
>     
> ii  libpam-modules                         1.0.1-5+lenny1                     
>     
> ii  libpam0g                               1.0.1-5+lenny1                     
>     

(I removed the 'Description' column off dpkg's output.)


Thanks,

Moritz



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to