CVE catalog

CVE-2005-1831

sudo: CVE-2005-1831

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansudosid1.9.17p2-9not affected
Debiansudoforky1.9.17p2-9not affected
Debiansudotrixie1.9.16p2-3+deb13u2not affected
Debiansudobookworm1.9.13p3-1+deb12u4not affected
Debiansudobookworm-security1.9.13p3-1+deb12u2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiansudosourcesidNot affectedunimportantNot reportedNot reported
DebiansudosourceforkyNot affectedunimportantNot reportedNot reported
DebiansudosourcetrixieNot affectedunimportantNot reportedNot reported
DebiansudosourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libnss-sudo]Not affected

    Source package: [sudo]

    Details (4)
    • 1.9.13p3-1+deb12u4 · all · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u4 · all · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · all · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · all · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

  • [sudo]Not affected
    Details (4)
    • 1.9.13p3-1+deb12u4 · amd64 · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u4 · arm64 · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · amd64 · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · arm64 · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

  • [sudo-ldap]Not affected

    Source package: [sudo]

    Details (4)
    • 1.9.13p3-1+deb12u4 · amd64 · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u4 · arm64 · bookworm

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · amd64 · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

    • 1.9.13p3-1+deb12u2 · arm64 · bookworm-security

      Not affected

      dsa · sudo · debian · bookworm

Observed:

References