Sudo Password Prompt Heap Overflow Vulnerability

Bugtraq ID:	4593
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 25 2002 12:00AM
Updated:	Apr 25 2002 12:00AM
Credit:	Discovered by 'fc'. Advisory and details published by Global InterSec LLC.
Vulnerable:	Todd Miller Sudo 1.6.5 p2 + NetBSD NetBSD 1.5.2 + OpenBSD OpenBSD 3.1 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha + SuSE Linux 8.0 i386 + SuSE Linux 8.0 Todd Miller Sudo 1.6.5 p1 + Slackware Linux 8.0 Todd Miller Sudo 1.6.5 Todd Miller Sudo 1.6.4 p2 Todd Miller Sudo 1.6.4 p1 Todd Miller Sudo 1.6.4 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha Todd Miller Sudo 1.6.3 p7 - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Slackware Linux 8.0 + SuSE Linux 7.3 sparc + SuSE Linux 7.3 ppc + SuSE Linux 7.3 i386 + SuSE Linux 7.3 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 Todd Miller Sudo 1.6.3 p6 + Guardian Digital Engarde Secure Linux 1.0.1 + Guardian Digital Engarde Secure Linux 1.0.1 + HP Secure OS software for Linux 1.0 + HP Secure OS software for Linux 1.0 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.1 alpha + SuSE Linux 7.2 i386 + SuSE Linux 7.2 + SuSE Linux 7.2 + SuSE Linux 7.1 x86 + SuSE Linux 7.1 x86 + SuSE Linux 7.1 sparc + SuSE Linux 7.1 sparc + SuSE Linux 7.1 ppc + SuSE Linux 7.1 ppc + SuSE Linux 7.1 alpha + SuSE Linux 7.1 alpha + SuSE Linux 7.1 + SuSE Linux 7.1 + SuSE Linux 7.0 sparc + SuSE Linux 7.0 sparc + SuSE Linux 7.0 ppc + SuSE Linux 7.0 ppc + SuSE Linux 7.0 i386 + SuSE Linux 7.0 i386 + SuSE Linux 7.0 alpha + SuSE Linux 7.0 alpha + SuSE Linux 7.0 + SuSE Linux 7.0 + Wirex Immunix OS 7.0 + Wirex Immunix OS 7.0 Todd Miller Sudo 1.6.3 p5 Todd Miller Sudo 1.6.3 p4 + Slackware Linux 7.1 Todd Miller Sudo 1.6.3 p3 Todd Miller Sudo 1.6.3 p2 Todd Miller Sudo 1.6.3 p1 Todd Miller Sudo 1.6.3 + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha Todd Miller Sudo 1.6.2 - Debian Linux 2.2 Todd Miller Sudo 1.6.1 Todd Miller Sudo 1.6 Todd Miller Sudo 1.5.9 + SuSE Linux 6.4 ppc + SuSE Linux 6.4 i386 + SuSE Linux 6.4 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.3 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0
Not Vulnerable:	Todd Miller Sudo 1.6.6 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + Slackware Linux 8.0 Apple Mac OS X 10.1.5

Sudo Password Prompt Heap Overflow Vulnerability

Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users.

Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature. The nature of the sudo utility requires that it be installed setuid root. Successful exploitation may allow for local attackers to gain root privileges.

Sudo Password Prompt Heap Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/hudo.c

Sudo Password Prompt Heap Overflow Vulnerability

Solution:
Admimistrators are advised to upgrade to the newly released Sudo 1.6.6. Source code patches are also available.

Users of HP Secure OS software for Linux 1.0 are advised to update with the RPMs listed for RedHat 7.1 below.

Apple OS X 10.1.5 is no longer vulnerable to this issue. Users should upgrade with the Software Update feature, or visit Apple's Software Downloads web page: http://www.info.apple.com/support/downloads.html.

EnGarde Secure Linux has released a new advisory. Further information is available in the referenced advisory ESA-20030515-015.

Additional upgrades are available.


Todd Miller Sudo 1.5.9

• SuSE sudo-1.5.9p1-85.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/ap1/sudo-1.5.9p1-85.ppc.rpm


• SuSE sudo-1.5.9p1-87.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/ap1/sudo-1.5.9p1-87.i386.r pm

Todd Miller Sudo 1.6

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.1

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.2

• Debian sudo_1.6.2p2-2.2_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/sudo _1.6.2p2-2.2_alpha.deb


• Debian sudo_1.6.2p2-2.2_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/sudo_1 .6.2p2-2.2_arm.deb


• Debian sudo_1.6.2p2-2.2_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/sudo_ 1.6.2p2-2.2_i386.deb


• Debian sudo_1.6.2p2-2.2_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/sudo_ 1.6.2p2-2.2_m68k.deb


• Debian sudo_1.6.2p2-2.2_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/su do_1.6.2p2-2.2_powerpc.deb


• Debian sudo_1.6.2p2-2.2_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/sudo _1.6.2p2-2.2_sparc.deb


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p6

• EnGarde Secure Linux sudo-1.6.4-1.0.7.i386.rpm
  i386 binary RPM.
  http://ftp.engardelinux.org/pub/engarde/stable/updates/i386/sudo-1.6.4 -1.0.7.i386.rpm


• EnGarde Secure Linux sudo-1.6.4-1.0.7.i686.rpm
  i686 binary RPM.
  http://ftp.engardelinux.org/pub/engarde/stable/updates/i686/sudo-1.6.4 -1.0.7.i686.rpm


• EnGarde Secure Linux sudo-1.6.4-1.0.7.src.rpm
  Source RPM.
  http://ftp.engardelinux.org/pub/engarde/stable/updates/SRPMS/sudo-1.6. 4-1.0.7.src.rpm


• SuSE sudo-1.6.3p6-36.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/ap1/sudo-1.6.3p6-36.sparc .rpm


• SuSE sudo-1.6.3p6-37.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/ap1/sudo-1.6.3p6-37.sparc .rpm


• SuSE sudo-1.6.3p6-40.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/ap1/sudo-1.6.3p6-40.alpha.r pm


• SuSE sudo-1.6.3p6-40.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/ap1/sudo-1.6.3p6-40.alpha.r pm


• SuSE sudo-1.6.3p6-45.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/ap1/sudo-1.6.3p6-45.ppc.rpm


• SuSE sudo-1.6.3p6-45.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/ap1/sudo-1.6.3p6-45.ppc.rpm


• SuSE sudo-1.6.3p6-90.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/ap1/sudo-1.6.3p6-90.i386.r pm


• SuSE sudo-1.6.3p6-91.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/ap1/sudo-1.6.3p6-91.i386.r pm


• SuSE sudo-1.6.3p6-92.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/ap1/sudo-1.6.3p6-92.i386.r pm


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p5

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p2

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p4

• Slackware sudo.tgz
  Slackware 7.1.
  ftp://ftp.slackware.com/pub/slackware/slackware-7.1/patches/packages/s udo.tgz


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p3

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p1

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.3 p7

• FreeBSD sudo-1.6.6.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/sud o-1.6.6.tgz


• Slackware sudo.tgz
  Slackware 8.0.
  ftp://ftp.slackware.com/pub/slackware/slackware-8.0/patches/packages/s udo.tgz


• SuSE sudo-1.6.3p7-33.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/ap1/sudo-1.6.3p7-33.sparc .rpm


• SuSE sudo-1.6.3p7-65.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/ap1/sudo-1.6.3p7-65.ppc.rpm


• SuSE sudo-1.6.3p7-83.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/ap1/sudo-1.6.3p7-83.i386.r pm


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.4 p1

• Conectiva sudo-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/sudo-1.6.6-1U50_1cl.i386. rpm


• Conectiva sudo-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/sudo-1. 6.6-1U50_1cl.i386.rpm


• Conectiva sudo-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/sudo-1.6 .6-1U50_1cl.i386.rpm


• Conectiva sudo-1.6.6-1U50_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/sudo-1.6.6-1U50_1cl.src. rpm


• Conectiva sudo-1.6.6-1U50_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/SRPMS/sudo-1 .6.6-1U50_1cl.src.rpm


• Conectiva sudo-1.6.6-1U50_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/SRPMS/sudo-1. 6.6-1U50_1cl.src.rpm


• Conectiva sudo-1.6.6-1U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/sudo-1.6.6-1U51_1cl.i386. rpm


• Conectiva sudo-1.6.6-1U51_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/sudo-1.6.6-1U51_1cl.src. rpm


• Conectiva sudo-1.6.6-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/sudo-1.6.6-1U60_1cl.i386. rpm


• Conectiva sudo-1.6.6-1U60_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/6.0/SRPMS/sudo-1.6.6-1U60_1cl.src. rpm


• Conectiva sudo-1.6.6-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/sudo-1.6.6-1U70_1cl.i386. rpm


• Conectiva sudo-1.6.6-1U70_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/7.0/SRPMS/sudo-1.6.6-1U70_1cl.src. rpm


• Conectiva sudo-1.6.6-1U8_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/sudo-1.6.6-1U8_1cl.i386.rpm


• Conectiva sudo-1.6.6-1U8_1cl.src.rpm
  Source RPM.
  ftp://atualizacoes.conectiva.com.br/8/SRPMS/sudo-1.6.6-1U8_1cl.src.rpm


• Conectiva sudo-doc-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/sudo-doc-1.6.6-1U50_1cl.i 386.rpm


• Conectiva sudo-doc-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/sudo-do c-1.6.6-1U50_1cl.i386.rpm


• Conectiva sudo-doc-1.6.6-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/sudo-doc -1.6.6-1U50_1cl.i386.rpm


• Conectiva sudo-doc-1.6.6-1U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/sudo-doc-1.6.6-1U51_1cl.i 386.rpm


• Conectiva sudo-doc-1.6.6-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/sudo-doc-1.6.6-1U60_1cl.i 386.rpm


• Conectiva sudo-doc-1.6.6-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/sudo-doc-1.6.6-1U70_1cl.i 386.rpm


• Conectiva sudo-doc-1.6.6-1U8_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/sudo-doc-1.6.6-1U8_1cl.i386 .rpm


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.4

• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Corporate Server 1.0.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Linux 7.1 i586.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Linux 7.2 i586.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Linux 8.0 i586.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Linux 8.1 i586.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Linux 8.2 i586.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.i586.rpm
  Mandrake Single Network Firewall 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.ia64.rpm
  Mandrake Linux 8.1 ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.ppc.rpm
  Mandrake Linux 8.0 PPC.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.ppc.rpm
  Mandrake Linux 8.2 PPC.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Corporate Server 1.0.1 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 7.1 i586 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 7.2 i586 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.0 i586 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.0 PPC Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.1 i586 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.1 ia64 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.2 i586 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Linux 8.2 PPC Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake sudo-1.6.4-3.1mdk.src.rpm
  Mandrake Single Network Firewall 7.2 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Red Hat sudo-1.6.5p2-1.6x.1.alpha.rpm
  ftp://updates.redhat.com/6.2/en/powertools/alpha/sudo-1.6.5p2-1.6x.1.a lpha.rpm


• Red Hat sudo-1.6.5p2-1.6x.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/powertools/i386/sudo-1.6.5p2-1.6x.1.i3 86.rpm


• Red Hat sudo-1.6.5p2-1.6x.1.sparc.rpm
  ftp://updates.redhat.com/6.2/en/powertools/sparc/sudo-1.6.5p2-1.6x.1.s parc.rpm


• Red Hat sudo-1.6.5p2-1.6x.1.src.rpm
  Source RPM.
  ftp://updates.redhat.com/6.2/en/powertools/SRPMS/sudo-1.6.5p2-1.6x.1.s rc.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/sudo-1.6.5p2-1.7x.1.alpha.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/sudo-1.6.5p2-1.7x.1.alpha.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/sudo-1.6.5p2-1.7x.1.i386.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/sudo-1.6.5p2-1.7x.1.i386.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/sudo-1.6.5p2-1.7x.1.i386.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/sudo-1.6.5p2-1.7x.1.ia64.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/sudo-1.6.5p2-1.7x.1.ia64.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.src.rpm
  Source RPM.
  ftp://updates.redhat.com/7.0/en/os/SRPMS/sudo-1.6.5p2-1.7x.1.src.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.src.rpm
  Source RPM.
  ftp://updates.redhat.com/7.1/en/os/SRPMS/sudo-1.6.5p2-1.7x.1.src.rpm


• Red Hat sudo-1.6.5p2-1.7x.1.src.rpm
  Source RPM.
  ftp://updates.redhat.com/7.2/en/os/SRPMS/sudo-1.6.5p2-1.7x.1.src.rpm


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.4 p2

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.5 p2

• Global InterSec sudo-1.6.5p3.patch
  Unofficial source code patch from Global InterSec.
  http://www.globalintersec.com/adv/files/sudo-1.6.5p3.patch


• NetBSD netbsd-sudo-pwprompt.patch
  Patch for the NetBSD port of sudo 1.6.5p2, for pkgsrc/security/sudo/patches.
  http://downloads.securityfocus.com/vulnerabilities/patches/netbsd-sudo -pwprompt.patch


• OpenBSD 002_sudo.patch
  Patch for the OpenBSD 3.1 port of sudo.
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/002_sudo.patch


• SuSE sudo-1.6.5p2-79.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.0/ap1/sudo-1.6.5p2-79.i386.r pm


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.5

• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz

Todd Miller Sudo 1.6.5 p1

• Slackware sudo-1.6.6-i386-1.tgz
  Slackware -current.
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/s udo-1.6.6-i386-1.tgz


• Todd Miller sudo-1.6.6.tar.gz
  ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.6.tar.gz


• Trustix sudo-1.6.6-1tr.i586.rpm
  Trustix Secure Linux 1.1 i586 RPM.
  http://www.trustix.net/pub/Trustix/updates/1.1/RPMS/sudo-1.6.6-1tr.i58 6.rpm


• Trustix sudo-1.6.6-1tr.src.rpm
  Trustix Secure Linux 1.1 Source RPM.
  http://www.trustix.net/pub/Trustix/updates/1.1/SRPMS/sudo-1.6.6-1tr.sr c.rpm