CVE-2008-3067: Suse Opensuse

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.

Affected products

• Suse Opensuse: version 10.3 only

Published 2008-07-07. Last modified 2026-06-16.