Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-1646HistoryJun 07, 2010 - 5:12 p.m.
CVE-2010-1646
2010-06-0717:12:00
Debian Security Bug Tracker
security-tracker.debian.org
18
6.2 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.4%
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 11 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 10 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 999 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 13 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
Related
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
FreeBSD : sudo -- Secure path vulnerability (d42e5b66-6ea0-11df-9c8d-00e0815b8da8)
2010-06-03 00:00:00
CentOS 5 : sudo (CESA-2010:0475)
2010-06-17 00:00:00
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
debian
debian
openvas
openvas
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
FreeBSD Ports: sudo
2010-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
prion
prion
Path traversal
2010-06-07 17:12:00
centos
centos
sudo security update
2010-06-16 12:03:33
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
Sudo protection bypass
2010-06-20 00:00:00
cve
cve
CVE-2010-1646
2010-06-07 17:12:00
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:31
ubuntucve
ubuntucve
CVE-2010-1646
2010-06-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
6.2 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.4%
Related for DEBIANCVE:CVE-2010-1646