[Python-Dev] sudo security hole w/ potential Python connection

Tue Jan 10 15:46:22 CET 2006

Got this from a Google alert overnight. It's not really a Python problem
(it's a sudo problem), but it's probably not a bad idea to understand the
implications.
 >> SUDO Python Environment Cleaning Privilege Escalation ...
 >> Secunia - UK
 >> ... This can be exploited by a user with sudo access to a python script
 >> to gain access to an interactive python prompt via the "PYTHONINSPECT"
 >> environment variable ...
 >> <http://secunia.com/advisories/18358/>
Skip