CVE-2010-2956

2010-09-1019:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2010-2956

sudo

runas group

local users

privilege escalation

6.1 Medium

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a “-u root” sequence.

CPENameOperatorVersion
todd_miller:sudotodd miller sudoeq1.7.2p4
todd_miller:sudotodd miller sudoeq1.7.0
todd_miller:sudotodd miller sudoeq1.7.4p2
todd_miller:sudotodd miller sudoeq1.7.1
todd_miller:sudotodd miller sudoeq1.7.2p2
todd_miller:sudotodd miller sudoeq1.7.2p7
todd_miller:sudotodd miller sudoeq1.7.2
todd_miller:sudotodd miller sudoeq1.7.4
todd_miller:sudotodd miller sudoeq1.7.4p3
todd_miller:sudotodd miller sudoeq1.7.3b1

CPE	Name	Operator	Version
todd_miller:sudo	todd miller sudo	eq	1.7.2p4
todd_miller:sudo	todd miller sudo	eq	1.7.0
todd_miller:sudo	todd miller sudo	eq	1.7.4p2
todd_miller:sudo	todd miller sudo	eq	1.7.1
todd_miller:sudo	todd miller sudo	eq	1.7.2p2
todd_miller:sudo	todd miller sudo	eq	1.7.2p7
todd_miller:sudo	todd miller sudo	eq	1.7.2
todd_miller:sudo	todd miller sudo	eq	1.7.4
todd_miller:sudo	todd miller sudo	eq	1.7.4p3
todd_miller:sudo	todd miller sudo	eq	1.7.3b1