Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.sudo.ws/sudo/alerts/netmask.html
http://www.vuxml.org/freebsd/b3435b68-9ee8-11e1-997c-002354ed89bc.html
Insight
The following package is affected: sudo
CVE-2012-2337
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
Severity
Classification
-
CVE CVE-2012-2337 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities