CVE-2012-0809

This exploit leverages a format string vulnerability in sudo (CVE-2012-0809) combined with a glibc FORTIFY_SOURCE bypass (CVE-2012-0864) to achieve local privilege escalation. It writes a backdoor to disk, compiles it, and executes it with root privileges via environment variable manipulation.

This advisory describes a format string vulnerability in sudo versions 1.8.0 to 1.8.3p1, where user-controlled input via argv[0] is passed to vfprintf without proper sanitization. Exploitation can lead to privilege escalation by overwriting critical function calls like setuid().