CVE-2004-1051

HIGH · CVSS 7.2 EPSS 1.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-03-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2004-1051

Severity

HIGH

CVSS

7.2

EPSS

1.37%

Original Filing — NVD Description

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.