CVE-2008-3067

CVE-2008-3067 describes a vulnerability in sudo within SUSE openSUSE 10.3 where the stdin buffer is not cleared after a password entry timeout. This could allow a local attacker to potentially retrieve a password by reading stdin from the parent process after the sudo child process terminates. The vulnerability has a low CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access, low attack complexity, no authentication required, and a potential impact only on confidentiality. There is no evidence of active exploitation, no known exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.