How severe is CVE-2005-1831?

CVE-2005-1831 has a CVSS 3.x base score of 8.4, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2005-1831 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (32nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-1831?

CVE-2005-1831 affects Todd Miller Sudo. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-1831?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2005-1831 published?

CVE-2005-1831 was published on 2005-05-31 and last updated on 2026-06-16.

CVE-2005-1831

CVE-2005-1831 is a high-severity vulnerability in Todd Miller Sudo with a CVSS 3.x base score of 8.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 8.4)
CVSS v2: 7.2
EPSS exploit prediction: 0% (32nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Todd Miller Sudo
Published: 2005-05-31
Last modified: 2026-06-16

Description

Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.

Frequently asked questions

What is CVE-2005-1831?: Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.
How severe is CVE-2005-1831?: CVE-2005-1831 has a CVSS 3.x base score of 8.4, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2005-1831 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (32nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-1831?: CVE-2005-1831 affects Todd Miller Sudo. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-1831?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2005-1831 published?: CVE-2005-1831 was published on 2005-05-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:*

More vulnerabilities in Todd Miller Sudo

CVE-2012-2337 — High (CVSS 7.2): sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a…
CVE-2012-0809 — High (CVSS 7.2): Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute…
CVE-2007-3149 — High (CVSS 7.2): sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to…
CVE-2006-0151 — High (CVSS 7.2): sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users…
CVE-2004-1051 — High (CVSS 7.2): sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to…
CVE-2002-0043 — High (CVSS 7.2): sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow…

All CVEs affecting Todd Miller Sudo →