Sudo Python环境变量处理安全性绕过漏洞

<a href="https://www.securityfocus.com/bid/16184" target="_blank">https://www.securityfocus.com/bid/16184</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200601-073" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200601-073</a><br/>

sudo1.6.8和其他版本未清除PYTHONINSPECT环境变量，这可让有限的本地用户通过Python脚本获取特权。

来源:SECUNIA
名称:18363
链接:http://secunia.com/advisories/18363
来源:UBUNTU
名称:USN-235-2
链接:http://www.ubuntulinux.org/support/documentation/usn/usn-235-2
来源:BID
名称:16184
链接:http://www.securityfocus.com/bid/16184
来源:SECUNIA
名称:18358
链接:http://secunia.com/advisories/18358
来源:TRUSTIX
名称:2006-0010
链接:http://www.trustix.org/errata/2006/0010
来源:SUSE
名称:SUSE-SR:2006:002
链接:http://www.novell.com/linux/security/advisories/2006_02_sr.html
来源:MANDRIVA
名称:MDKSA-2006:159
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:159
来源:DEBIAN
名称:DSA-946
链接:http://www.debian.org/security/2006/dsa-946
来源:SLACKWARE
名称:SSA:2006-045-08
链接:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822
来源:SECUNIA
名称:21692
链接:http://secunia.com/advisories/21692
来源:SECUNIA
名称:19016
链接:http://secunia.com/advisories/19016
来源:SECUNIA
名称:18906
链接:http://secunia.com/advisories/18906
来源:SECUNIA
名称:18558
链接:http://secunia.com/advisories/18558
来源:SECUNIA
名称:18549
链接:http://secunia.c