CVE-2002-0184: Debian Linux

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

Affected products

• Debian Debian Linux: version 2.2 only
• Sudo Project Sudo: before 1.6.6 (fixed in 1.6.6)

Published 2002-05-16. Last modified 2026-06-16.