The sudo package that is included with most all UNIX based operating systems, and that is also included in the Mac OS X contains a buffer overflow in its Mac OS X version. Sudo is one of the first noted software package for the UNIX operating system that are vulnerable on the Mac OS X.
Credit:
The information has been provided by Macintosh Security from SecureMac.com.
Vulnerable systems:
Sudo version 1.6.3.7 and prior
Mac OS X version 10.0.2 and prior
On 23/April/2001 FreeBSD, Inc. released a security advisory warning users that all versions of sudo prior to version 1.6.3.7 contain a local command-line buffer overflow allowing local users to gain increased privileges on the local system.
What is sudo?
Sudo (superuser do) is a piece of software that allows a system admin to give certain users/groups the ability to run commands as root or another user
Building sudo:
If you choose not to use the packaged installation above and you choose to build sudo by yourself, you must have the developers tools installed.
To build sudo go through the following steps:
1) mkdir build-sudo
2) cd build-sudo
3) wget http://www.courtesan.com/sudo/dist/sudo-1.6.3p7.tar.gz
4) gnutar -xzf sudo-1.6.3p7.tar.gz
5) cd sudo-1.6.3p7
6) cp /usr/libexec/config.* ./
7) ./configure --with-password-timeout=0 \
8) --mandir=/usr/share/man --prefix=/usr
9) make
10) sudo make install
