Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0426
HistoryFeb 24, 2010 - 6:30 p.m.

CVE-2010-0426

2010-02-2418:30:00
CWE-264
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user’s home directory.

Affected configurations

NVD
Node
todd_millersudoMatch1.6
OR
todd_millersudoMatch1.6.1
OR
todd_millersudoMatch1.6.2
OR
todd_millersudoMatch1.6.3
OR
todd_millersudoMatch1.6.3_p1
OR
todd_millersudoMatch1.6.3_p2
OR
todd_millersudoMatch1.6.3_p3
OR
todd_millersudoMatch1.6.3_p4
OR
todd_millersudoMatch1.6.3_p5
OR
todd_millersudoMatch1.6.3_p6
OR
todd_millersudoMatch1.6.3_p7
OR
todd_millersudoMatch1.6.4_p1
OR
todd_millersudoMatch1.6.4_p2
OR
todd_millersudoMatch1.6.5_p1
OR
todd_millersudoMatch1.6.5_p2
OR
todd_millersudoMatch1.6.7_p5
OR
todd_millersudoMatch1.6.8_p1
OR
todd_millersudoMatch1.6.8_p2
OR
todd_millersudoMatch1.6.8_p5
OR
todd_millersudoMatch1.6.8_p7
OR
todd_millersudoMatch1.6.8_p8
OR
todd_millersudoMatch1.6.8_p9
OR
todd_millersudoMatch1.6.8_p12
OR
todd_millersudoMatch1.6.9_p17
OR
todd_millersudoMatch1.6.9_p18
OR
todd_millersudoMatch1.6.9_p19
OR
todd_millersudoMatch1.7.0
OR
todd_millersudoMatch1.7.1
OR
todd_millersudoMatch1.7.2
OR
todd_millersudoMatch1.7.2p1
OR
todd_millersudoMatch1.7.2p2
OR
todd_millersudoMatch1.7.2p3

References

Related

freebsd 1
openvas 41
seebug 1
securityvulns 4
altlinux 3
nessus 31
prion 2
cvelist 2
cve 2
ubuntu 2
fedora 6
veracode 2
ubuntucve 2
debiancve 2
centos 2
debian 2
osv 1
slackware 1
oraclelinux 2
redhat 4
packetstorm 1
nvd 1
gentoo 1
vmware 2
freebsd
freebsd
sudo -- Privilege escalation with sudoedit
2010-01-29 00:00:00
openvas
openvas
Mandriva Update for sudo MDVSA-2010:049 (sudo)
2010-03-02 00:00:00
Mandriva Update for mailcap MDVA-2010:049 (mailcap)
2010-02-08 00:00:00
FreeBSD Ports: sudo
2010-03-16 00:00:00
seebug
seebug
Sudo sudoeditε‘½δ»€ζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2010-02-25 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:049 ] sudo
2010-03-01 00:00:00
[USN-928-1] Sudo vulnerability
2010-04-19 00:00:00
sudoedit local privilege escalation through PATH manipulation
2010-04-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
nessus
nessus
SuSE 10 Security Update : sudo (ZYPP Patch Number 6891)
2010-03-09 00:00:00
Fedora 12 : sudo-1.7.2p5-1.fc12 (2010-3359)
2010-07-01 00:00:00
Fedora 11 : sudo-1.7.2p5-1.fc11 (2010-3415)
2010-07-01 00:00:00
prion
prion
Directory traversal
2010-02-24 18:30:00
Command injection
2010-04-16 19:30:00
cvelist
cvelist
CVE-2010-0426
2010-02-24 18:00:00
CVE-2010-1163
2010-04-16 19:00:00
cve
cve
CVE-2010-0426
2010-02-24 18:30:00
CVE-2010-1163
2010-04-16 19:30:00
ubuntu
ubuntu
Sudo vulnerability
2010-04-15 00:00:00
sudo vulnerabilities
2010-02-26 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p5-1.fc11
2010-03-09 03:13:16
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-1.fc13
2010-04-23 06:04:36
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-1.fc12
2010-05-03 16:05:30
veracode
veracode
Privilege Escalation
2020-04-10 00:42:18
Arbitrary Code Execution
2020-04-10 00:48:33
ubuntucve
ubuntucve
CVE-2010-0426
2010-02-23 00:00:00
CVE-2010-1163
2010-04-16 00:00:00
debiancve
debiancve
CVE-2010-0426
2010-02-24 18:30:00
CVE-2010-1163
2010-04-16 19:30:00
centos
centos
sudo security update
2010-05-28 10:47:01
sudo security update
2010-03-01 18:44:36
debian
debian
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
osv
osv
sudo - several vulnerabilities
2010-03-02 00:00:00
slackware
slackware
[slackware-security] sudo
2010-04-20 17:51:19
oraclelinux
oraclelinux
sudo security update
2010-04-20 00:00:00
sudo security update
2010-02-26 00:00:00
redhat
redhat
(RHSA-2010:0122) Important: sudo security update
2010-02-26 00:00:00
(RHSA-2010:0361) Moderate: sudo security update
2010-04-20 00:00:00
(RHSA-2010:0172) Important: rhev-hypervisor security and bug fix update
2010-03-24 00:00:00
packetstorm
packetstorm
Sudo 1.7.2p5 Local Privilege Escalation
2010-04-20 00:00:00
nvd
nvd
CVE-2010-1163
2010-04-16 19:30:00
gentoo
gentoo
sudo: Privilege escalation
2010-03-03 00:00:00
vmware
vmware
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2010-0426
freebsd1openvas41seebug1securityvulns4altlinux3nessus31prion2cvelist2cve2ubuntu2fedora6veracode2ubuntucve2debiancve2centos2debian2osv1slackware1oraclelinux2redhat4packetstorm1nvd1gentoo1vmware2