Total vulnerabilities in the database
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux | 4.0 | 4.0.x |
| redhat / enterprise_linux | 3.0 | 3.0.x |