Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-1646
HistoryJun 07, 2010 - 5:12 p.m.

CVE-2010-1646

2010-06-0717:12:00
CWE-264
[email protected]
web.nvd.nist.gov
42
cve-2010-1646
sudo
privilege escalation
environment variables
vulnerability

6 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

JSON

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

References

Related

oraclelinux 1
nessus 16
osv 1
debian 2
openvas 21
fedora 3
prion 1
centos 1
freebsd 1
securityvulns 2
debiancve 1
ubuntu 1
redhat 1
veracode 1
ubuntucve 1
altlinux 2
gentoo 1
vmware 2
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
FreeBSD : sudo -- Secure path vulnerability (d42e5b66-6ea0-11df-9c8d-00e0815b8da8)
2010-06-03 00:00:00
CentOS 5 : sudo (CESA-2010:0475)
2010-06-17 00:00:00
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
debian
debian
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
openvas
openvas
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
FreeBSD Ports: sudo
2010-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
prion
prion
Path traversal
2010-06-07 17:12:00
centos
centos
sudo security update
2010-06-16 12:03:33
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
Sudo protection bypass
2010-06-20 00:00:00
debiancve
debiancve
CVE-2010-1646
2010-06-07 17:12:00
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:31
ubuntucve
ubuntucve
CVE-2010-1646
2010-06-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00

6 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

JSON
Related for CVE-2010-1646
oraclelinux1nessus16osv1debian2openvas21fedora3prion1centos1freebsd1securityvulns2debiancve1ubuntu1redhat1veracode1ubuntucve1altlinux2gentoo1vmware2