Lucene search
RedhatCVE-2013-1775HistoryMar 05, 2013 - 9:38 p.m.
CVE-2013-1775
2013-03-0521:38:56
CWE-264
redhat
web.nvd.nist.gov
94
cve-2013-1775
sudo
vulnerability
bypass
time restrictions
privilege escalation
nvd
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
High
EPSS
0
Percentile
16.4%
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Affected configurations
Node
todd_millersudoMatch1.6
ORtodd_millersudoMatch1.6.1
ORtodd_millersudoMatch1.6.2
ORtodd_millersudoMatch1.6.2p3
ORtodd_millersudoMatch1.6.3
ORtodd_millersudoMatch1.6.3_p7
ORtodd_millersudoMatch1.6.4
ORtodd_millersudoMatch1.6.4p2
ORtodd_millersudoMatch1.6.5
ORtodd_millersudoMatch1.6.6
ORtodd_millersudoMatch1.6.7
ORtodd_millersudoMatch1.6.7p5
ORtodd_millersudoMatch1.6.8
ORtodd_millersudoMatch1.6.8p12
ORtodd_millersudoMatch1.6.9
ORtodd_millersudoMatch1.6.9p20
ORtodd_millersudoMatch1.6.9p21
ORtodd_millersudoMatch1.6.9p22
ORtodd_millersudoMatch1.6.9p23
Node
todd_millersudoMatch1.8.0
ORtodd_millersudoMatch1.8.1
ORtodd_millersudoMatch1.8.1p1
ORtodd_millersudoMatch1.8.1p2
ORtodd_millersudoMatch1.8.2
ORtodd_millersudoMatch1.8.3
ORtodd_millersudoMatch1.8.3p1
ORtodd_millersudoMatch1.8.3p2
ORtodd_millersudoMatch1.8.4
ORtodd_millersudoMatch1.8.4p1
ORtodd_millersudoMatch1.8.4p2
ORtodd_millersudoMatch1.8.4p3
ORtodd_millersudoMatch1.8.4p4
ORtodd_millersudoMatch1.8.4p5
ORtodd_millersudoMatch1.8.5
ORtodd_millersudoMatch1.8.5p1
ORtodd_millersudoMatch1.8.5p2
ORtodd_millersudoMatch1.8.5p3
ORtodd_millersudoMatch1.8.6
ORtodd_millersudoMatch1.8.6p1
ORtodd_millersudoMatch1.8.6p2
ORtodd_millersudoMatch1.8.6p3
ORtodd_millersudoMatch1.8.6p4
ORtodd_millersudoMatch1.8.6p5
ORtodd_millersudoMatch1.8.6p6
Node
applemac_os_xRange≤10.10.4
Node
todd_millersudoMatch1.7.0
ORtodd_millersudoMatch1.7.1
ORtodd_millersudoMatch1.7.2
ORtodd_millersudoMatch1.7.2p1
ORtodd_millersudoMatch1.7.2p2
ORtodd_millersudoMatch1.7.2p3
ORtodd_millersudoMatch1.7.2p4
ORtodd_millersudoMatch1.7.2p5
ORtodd_millersudoMatch1.7.2p6
ORtodd_millersudoMatch1.7.2p7
ORtodd_millersudoMatch1.7.3b1
ORtodd_millersudoMatch1.7.4
ORtodd_millersudoMatch1.7.4p1
ORtodd_millersudoMatch1.7.4p2
ORtodd_millersudoMatch1.7.4p3
ORtodd_millersudoMatch1.7.4p4
ORtodd_millersudoMatch1.7.4p5
ORtodd_millersudoMatch1.7.4p6
ORtodd_millersudoMatch1.7.5
ORtodd_millersudoMatch1.7.6
ORtodd_millersudoMatch1.7.6p1
ORtodd_millersudoMatch1.7.6p2
ORtodd_millersudoMatch1.7.7
ORtodd_millersudoMatch1.7.8
ORtodd_millersudoMatch1.7.8p1
ORtodd_millersudoMatch1.7.8p2
ORtodd_millersudoMatch1.7.9
ORtodd_millersudoMatch1.7.9p1
ORtodd_millersudoMatch1.7.10
ORtodd_millersudoMatch1.7.10p1
ORtodd_millersudoMatch1.7.10p2
ORtodd_millersudoMatch1.7.10p3
ORtodd_millersudoMatch1.7.10p4
ORtodd_millersudoMatch1.7.10p5
ORtodd_millersudoMatch1.7.10p6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| todd_miller | sudo | 1.6.4p2 | cpe:/a:todd_miller:sudo:1.6.4p2::: |
| todd_miller | sudo | 1.6.3+p7 | cpe:/a:todd_miller:sudo:1.6.3+p7::: |
| todd_miller | sudo | 1.6.7 | cpe:/a:todd_miller:sudo:1.6.7::: |
| todd_miller | sudo | 1.6.8 | cpe:/a:todd_miller:sudo:1.6.8::: |
| todd_miller | sudo | 1.6.9p21 | cpe:/a:todd_miller:sudo:1.6.9p21::: |
| todd_miller | sudo | 1.6.3 | cpe:/a:todd_miller:sudo:1.6.3::: |
| todd_miller | sudo | 1.6.7p5 | cpe:/a:todd_miller:sudo:1.6.7p5::: |
| todd_miller | sudo | 1.6.9p22 | cpe:/a:todd_miller:sudo:1.6.9p22::: |
| todd_miller | sudo | 1.6.4 | cpe:/a:todd_miller:sudo:1.6.4::: |
| todd_miller | sudo | 1.6.2p3 | cpe:/a:todd_miller:sudo:1.6.2p3::: |
References
lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
lists.opensuse.org/opensuse-updates/2013-03/msg00066.html
osvdb.org/90677
rhn.redhat.com/errata/RHSA-2013-1353.html
rhn.redhat.com/errata/RHSA-2013-1701.html
support.apple.com/kb/HT5880
www.debian.org/security/2013/dsa-2642
www.openwall.com/lists/oss-security/2013/02/27/22
www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
www.securityfocus.com/bid/58203
www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440
www.sudo.ws/repos/sudo/rev/ddf399e3e306
www.sudo.ws/repos/sudo/rev/ebd6cc75020f
www.sudo.ws/sudo/alerts/epoch_ticket.html
www.ubuntu.com/usn/USN-1754-1
support.apple.com/kb/HT205031
Related
openvas
openvas
Ubuntu Update for sudo USN-1754-1
2013-03-05 00:00:00
Ubuntu: Security Advisory (USN-1754-1)
2013-03-05 00:00:00
Slackware: Security Advisory (SSA:2013-065-01)
2022-04-21 00:00:00
canvas
canvas
Immunity Canvas: SUDO_TIMESTAMP
2013-03-05 21:38:00
cvelist
cvelist
CVE-2013-1775
2013-03-04 21:00:00
threatpost
threatpost
Metasploit Module Adds Sudo Vulnerability for OS X
2013-08-29 13:28:56
Time Stamp Bug in Sudo Could Have Allowed Code Entry
2013-03-05 18:17:50
thn
thn
nessus
nessus
FreeBSD : sudo -- Authentication bypass when clock is reset (764344fb-8214-11e2-9273-902b343deec9)
2013-03-04 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : sudo vulnerability (USN-1754-1)
2013-03-01 00:00:00
openSUSE Security Update : sudo (openSUSE-SU-2013:0495-1)
2014-06-13 00:00:00
securityvulns
securityvulns
[USN-1754-1] Sudo vulnerability
2013-03-02 00:00:00
sudo protection bypass
2013-03-10 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
ubuntucve
ubuntucve
CVE-2013-1775
2013-02-27 00:00:00
freebsd
freebsd
sudo -- Authentication bypass when clock is reset
2013-02-27 00:00:00
ubuntu
ubuntu
Sudo vulnerability
2013-02-28 00:00:00
packetstorm
packetstorm
Mac OS X 10.8.4 Local Privilege Escalation
2013-08-30 00:00:00
Mac OS X Sudo Password Bypass
2013-08-26 00:00:00
nvd
nvd
CVE-2013-1775
2013-03-05 21:38:56
zdt
zdt
Mac OS X Sudo Password Bypass Vulnerability
2013-08-27 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:51:56
Authentication Bypass
2019-05-02 04:59:14
Improper Input Validation
2019-05-02 04:59:14
seebug
seebug
Mac OS X Sudo Password Bypass
2014-07-01 00:00:00
metasploit
metasploit
Mac OS X Sudo Password Bypass
2013-08-26 19:52:51
debiancve
debiancve
CVE-2013-1775
2013-03-05 21:38:56
prion
prion
Code injection
2013-03-05 21:38:00
exploitdb
exploitdb
Apple Mac OSX - Sudo Password Bypass (Metasploit)
2013-08-29 00:00:00
slackware
slackware
sudo
2013-03-06 20:52:08
fedora
fedora
[SECURITY] Fedora 18 Update: sudo-1.8.6p7-1.fc18
2013-03-16 01:22:34
[SECURITY] Fedora 17 Update: sudo-1.8.6p7-1.fc17
2013-03-19 20:04:50
osv
osv
sudo - several issues
2013-03-09 00:00:00
debian
debian
[SECURITY] [DSA 2642-1] sudo security update
2013-03-09 08:35:30
centos
centos
sudo security update
2013-11-26 13:33:00
sudo security update
2013-10-07 13:01:59
redhat
redhat
(RHSA-2013:1701) Low: sudo security, bug fix and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1353) Low: sudo security and bug fix update
2013-09-30 16:52:28
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
amazon
amazon
Low: sudo
2013-12-11 20:34:00
oraclelinux
oraclelinux
sudo security, bug fix and enhancement update
2013-11-25 00:00:00
sudo security and bug fix update
2013-10-02 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2014-01-21 00:00:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.1
Confidence
High
EPSS
0
Percentile
16.4%
Related for CVE-2013-1775