CVE-2009-0034

HIGH · CVSS 7.8 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-01-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-0034

Severity

HIGH

CVSS

7.8

EPSS

0.41%

Original NVD Description

parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.