CVE ID:	CVE-2014-9680
Description:	sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
Test IDs:	1.3.6.1.4.1.25623.1.0.703167   1.3.6.1.4.1.25623.1.0.869033   1.3.6.1.4.1.25623.1.0.121369   1.3.6.1.4.1.25623.1.1.13.2015.047.03   1.3.6.1.4.1.25623.1.1.10.2015.0079   1.3.6.1.4.1.25623.1.0.869030   1.3.6.1.4.1.25623.1.1.1.2.2015.160   1.3.6.1.4.1.25623.1.0.123062   1.3.6.1.4.1.25623.1.0.842132   1.3.6.1.4.1.25623.1.0.871414
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9680 https://security.gentoo.org/glsa/201504-02 http://openwall.com/lists/oss-security/2014/10/15/24 RedHat Security Advisories: RHSA-2015:1409 http://rhn.redhat.com/errata/RHSA-2015-1409.html http://www.securitytracker.com/id/1033158