CVE-2005-1831
NVD-CWE-OtherPublished: May 31, 2005· Updated: Jun 16, 2026
Official Description
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.
Technical Analysis
CVE-2005-1831 requires local access, meaning attackers must already have a foothold on the target system.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.4.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
All References (8)
Quick Facts
Related CVEs (NVD-CWE-Other)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2005-1831 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts