Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1163
HistoryApr 16, 2010 - 7:30 p.m.

CVE-2010-1163

2010-04-1619:30:00
CWE-20
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for β€œ.”, which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.

Affected configurations

NVD
Node
todd_millersudoMatch1.6.8
OR
todd_millersudoMatch1.6.8_p1
OR
todd_millersudoMatch1.6.8_p2
OR
todd_millersudoMatch1.6.8_p5
OR
todd_millersudoMatch1.6.8_p7
OR
todd_millersudoMatch1.6.8_p8
OR
todd_millersudoMatch1.6.8_p9
OR
todd_millersudoMatch1.6.8_p12
OR
todd_millersudoMatch1.6.8p7
OR
todd_millersudoMatch1.6.9_p17
OR
todd_millersudoMatch1.6.9_p18
OR
todd_millersudoMatch1.6.9_p19
OR
todd_millersudoMatch1.6.9_p20
OR
todd_millersudoMatch1.6.9_p21
OR
todd_millersudoMatch1.6.9_p22
OR
todd_millersudoMatch1.7.0
OR
todd_millersudoMatch1.7.1
OR
todd_millersudoMatch1.7.2p1
OR
todd_millersudoMatch1.7.2p2
OR
todd_millersudoMatch1.7.2p3
OR
todd_millersudoMatch1.7.2p4

References

Related

nessus 36
openvas 43
centos 2
cvelist 2
debiancve 2
securityvulns 4
oraclelinux 2
packetstorm 1
veracode 2
cve 2
slackware 1
prion 2
ubuntucve 2
redhat 4
cisco 1
freebsd 2
seebug 2
altlinux 5
gentoo 2
fedora 6
ubuntu 2
nvd 1
debian 2
osv 1
vmware 2
nessus
nessus
RHEL 5 : sudo (RHSA-2010:0361)
2010-05-11 00:00:00
Oracle Linux 5 : sudo (ELSA-2010-0361)
2013-07-12 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 / current : sudo (SSA:2010-110-01)
2010-04-21 00:00:00
openvas
openvas
Mandriva Update for sudo MDVSA-2010:078 (sudo)
2010-04-19 00:00:00
Oracle: Security Advisory (ELSA-2010-0361)
2015-10-06 00:00:00
Mandriva Update for sudo MDVSA-2010:078 (sudo)
2010-04-19 00:00:00
centos
centos
sudo security update
2010-05-28 10:47:01
sudo security update
2010-03-01 18:44:36
cvelist
cvelist
CVE-2010-1163
2010-04-16 19:00:00
CVE-2010-0426
2010-02-24 18:00:00
debiancve
debiancve
CVE-2010-1163
2010-04-16 19:30:00
CVE-2010-0426
2010-02-24 18:30:00
securityvulns
securityvulns
sudoedit local privilege escalation through PATH manipulation
2010-04-22 00:00:00
sudo protection bypass
2010-04-22 00:00:00
[ MDVSA-2010:049 ] sudo
2010-03-01 00:00:00
oraclelinux
oraclelinux
sudo security update
2010-04-20 00:00:00
sudo security update
2010-02-26 00:00:00
packetstorm
packetstorm
Sudo 1.7.2p5 Local Privilege Escalation
2010-04-20 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:48:33
Privilege Escalation
2020-04-10 00:42:18
cve
cve
CVE-2010-1163
2010-04-16 19:30:00
CVE-2010-0426
2010-02-24 18:30:00
slackware
slackware
[slackware-security] sudo
2010-04-20 17:51:19
prion
prion
Command injection
2010-04-16 19:30:00
Directory traversal
2010-02-24 18:30:00
ubuntucve
ubuntucve
CVE-2010-1163
2010-04-16 00:00:00
CVE-2010-0426
2010-02-23 00:00:00
redhat
redhat
(RHSA-2010:0361) Moderate: sudo security update
2010-04-20 00:00:00
(RHSA-2010:0122) Important: sudo security update
2010-02-26 00:00:00
(RHSA-2010:0476) Important: rhev-hypervisor security, bug fix, and enhancement update
2010-06-22 00:00:00
cisco
cisco
Sudo sudoedit Local Command Privilege Escalation Vulnerability
2010-04-19 20:43:48
freebsd
freebsd
sudo -- Privilege escalation with sudoedit
2010-01-29 00:00:00
sudo -- Privilege escalation with sudoedit
2010-04-09 00:00:00
seebug
seebug
Sudo sudoeditε‘½δ»€ζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2010-02-25 00:00:00
Sudo sudoeditθ·―εΎ„θ§£ζžζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2010-04-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2010-06-01 00:00:00
sudo: Privilege escalation
2010-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p5-1.fc11
2010-03-09 03:13:16
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-1.fc13
2010-04-23 06:04:36
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-1.fc12
2010-05-03 16:05:30
ubuntu
ubuntu
Sudo vulnerability
2010-04-15 00:00:00
sudo vulnerabilities
2010-02-26 00:00:00
nvd
nvd
CVE-2010-0426
2010-02-24 18:30:00
debian
debian
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
osv
osv
sudo - several vulnerabilities
2010-03-02 00:00:00
vmware
vmware
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2010-1163
nessus36openvas43centos2cvelist2debiancve2securityvulns4oraclelinux2packetstorm1veracode2cve2slackware1prion2ubuntucve2redhat4cisco1freebsd2seebug2altlinux5gentoo2fedora6ubuntu2nvd1debian2osv1vmware2