https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:14:11 +0000 https://vulnerability.circl.lu/vuln/cve-2014-9680 <p>sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.</p> <p>sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.</p> https://vulnerability.circl.lu/vuln/cve-2014-9680 https://vulnerability.circl.lu/vuln/usn-2533-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: sudo</p> <p>Jakub Wilk and Stephane Chazelas discovered that Sudo incorrectly handled the TZ environment variable. An attacker with Sudo access could possibly use this issue to open arbitrary files, bypassing intended permissions.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: sudo</p> <p>Jakub Wilk and Stephane Chazelas discovered that Sudo incorrectly handled the TZ environment variable. An attacker with Sudo access could possibly use this issue to open arbitrary files, bypassing intended permissions.</p> https://vulnerability.circl.lu/vuln/usn-2533-1