Lucene search

MitreCVE-2013-2776

HistoryApr 08, 2013 - 5:55 p.m.

CVE-2013-2776

2013-04-0817:55:01

CWE-264

mitre

web.nvd.nist.gov

cve-2013-2776

sudo

authorization hijacking

local exploit

security vulnerability

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

High

EPSS

Percentile

10.1%

JSON

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

Affected configurations

Nvd

Node

todd_millersudoMatch1.3.5

todd_millersudoMatch1.6

todd_millersudoMatch1.6.1

todd_millersudoMatch1.6.2

todd_millersudoMatch1.6.2p3

todd_millersudoMatch1.6.3

todd_millersudoMatch1.6.3_p7

todd_millersudoMatch1.6.4

todd_millersudoMatch1.6.4p2

todd_millersudoMatch1.6.5

todd_millersudoMatch1.6.6

todd_millersudoMatch1.6.7

todd_millersudoMatch1.6.7p5

todd_millersudoMatch1.6.8

todd_millersudoMatch1.6.8p12

todd_millersudoMatch1.6.9

todd_millersudoMatch1.6.9p20

todd_millersudoMatch1.6.9p21

todd_millersudoMatch1.6.9p22

todd_millersudoMatch1.6.9p23

todd_millersudoMatch1.7.0

todd_millersudoMatch1.7.1

todd_millersudoMatch1.7.2

todd_millersudoMatch1.7.2p1

todd_millersudoMatch1.7.2p2

todd_millersudoMatch1.7.2p3

todd_millersudoMatch1.7.2p4

todd_millersudoMatch1.7.2p5

todd_millersudoMatch1.7.2p6

todd_millersudoMatch1.7.2p7

todd_millersudoMatch1.7.3b1

todd_millersudoMatch1.7.4

todd_millersudoMatch1.7.4p1

todd_millersudoMatch1.7.4p2

todd_millersudoMatch1.7.4p3

todd_millersudoMatch1.7.4p4

todd_millersudoMatch1.7.4p5

todd_millersudoMatch1.7.4p6

todd_millersudoMatch1.7.5

todd_millersudoMatch1.7.6

todd_millersudoMatch1.7.6p1

todd_millersudoMatch1.7.6p2

todd_millersudoMatch1.7.7

todd_millersudoMatch1.7.8

todd_millersudoMatch1.7.8p1

todd_millersudoMatch1.7.8p2

todd_millersudoMatch1.7.9

todd_millersudoMatch1.7.9p1

todd_millersudoMatch1.7.10

todd_millersudoMatch1.7.10p1

todd_millersudoMatch1.7.10p2

todd_millersudoMatch1.7.10p3

Node

applemac_os_xRange≤10.10.4

Node

todd_millersudoMatch1.7.10p4

todd_millersudoMatch1.7.10p5

todd_millersudoMatch1.8.0

todd_millersudoMatch1.8.1

todd_millersudoMatch1.8.1p1

todd_millersudoMatch1.8.1p2

todd_millersudoMatch1.8.2

todd_millersudoMatch1.8.3

todd_millersudoMatch1.8.3p1

todd_millersudoMatch1.8.3p2

todd_millersudoMatch1.8.4

todd_millersudoMatch1.8.4p1

todd_millersudoMatch1.8.4p2

todd_millersudoMatch1.8.4p3

todd_millersudoMatch1.8.4p4

todd_millersudoMatch1.8.4p5

todd_millersudoMatch1.8.5

todd_millersudoMatch1.8.6

todd_millersudoMatch1.8.6p1

todd_millersudoMatch1.8.6p2

todd_millersudoMatch1.8.6p3

todd_millersudoMatch1.8.6p4

todd_millersudoMatch1.8.6p5

VendorProductVersionCPE
todd_millersudo1.6.1cpe:/a:todd_miller:sudo:1.6.1:::
todd_millersudo1.7.4p4cpe:/a:todd_miller:sudo:1.7.4p4:::
todd_millersudo1.6.4p2cpe:/a:todd_miller:sudo:1.6.4p2:::
todd_millersudo1.7.8p1cpe:/a:todd_miller:sudo:1.7.8p1:::
todd_millersudo1.7.6p1cpe:/a:todd_miller:sudo:1.7.6p1:::
todd_millersudo1.6cpe:/a:todd_miller:sudo:1.6:::
todd_millersudo1.7.8p2cpe:/a:todd_miller:sudo:1.7.8p2:::
todd_millersudo1.7.2cpe:/a:todd_miller:sudo:1.7.2:::
todd_millersudo1.6.3cpe:/a:todd_miller:sudo:1.6.3:::
todd_millersudo1.6.9p21cpe:/a:todd_miller:sudo:1.6.9p21:::

Vendor	Product	Version	CPE
todd_miller	sudo	1.6.1	cpe:/a:todd_miller:sudo:1.6.1:::
todd_miller	sudo	1.7.4p4	cpe:/a:todd_miller:sudo:1.7.4p4:::
todd_miller	sudo	1.6.4p2	cpe:/a:todd_miller:sudo:1.6.4p2:::
todd_miller	sudo	1.7.8p1	cpe:/a:todd_miller:sudo:1.7.8p1:::
todd_miller	sudo	1.7.6p1	cpe:/a:todd_miller:sudo:1.7.6p1:::
todd_miller	sudo	1.6	cpe:/a:todd_miller:sudo:1.6:::
todd_miller	sudo	1.7.8p2	cpe:/a:todd_miller:sudo:1.7.8p2:::
todd_miller	sudo	1.7.2	cpe:/a:todd_miller:sudo:1.7.2:::
todd_miller	sudo	1.6.3	cpe:/a:todd_miller:sudo:1.6.3:::
todd_miller	sudo	1.6.9p21	cpe:/a:todd_miller:sudo:1.6.9p21:::