Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1646
HistoryJun 07, 2010 - 5:12 p.m.

CVE-2010-1646

2010-06-0717:12:48
CWE-264
[email protected]
web.nvd.nist.gov

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

Affected configurations

NVD
Node
todd_millersudoMatch1.3.1
OR
todd_millersudoMatch1.6
OR
todd_millersudoMatch1.6.1
OR
todd_millersudoMatch1.6.2
OR
todd_millersudoMatch1.6.2p1
OR
todd_millersudoMatch1.6.2p2
OR
todd_millersudoMatch1.6.2p3
OR
todd_millersudoMatch1.6.3
OR
todd_millersudoMatch1.6.3p1
OR
todd_millersudoMatch1.6.3p2
OR
todd_millersudoMatch1.6.3p3
OR
todd_millersudoMatch1.6.3p4
OR
todd_millersudoMatch1.6.3p5
OR
todd_millersudoMatch1.6.3p6
OR
todd_millersudoMatch1.6.3p7
OR
todd_millersudoMatch1.6.4
OR
todd_millersudoMatch1.6.4p1
OR
todd_millersudoMatch1.6.4p2
OR
todd_millersudoMatch1.6.5
OR
todd_millersudoMatch1.6.5p1
OR
todd_millersudoMatch1.6.5p2
OR
todd_millersudoMatch1.6.6
OR
todd_millersudoMatch1.6.7
OR
todd_millersudoMatch1.6.7p1
OR
todd_millersudoMatch1.6.7p2
OR
todd_millersudoMatch1.6.7p3
OR
todd_millersudoMatch1.6.7p4
OR
todd_millersudoMatch1.6.7p5
OR
todd_millersudoMatch1.6.8
OR
todd_millersudoMatch1.6.8p1
OR
todd_millersudoMatch1.6.8p2
OR
todd_millersudoMatch1.6.8p3
OR
todd_millersudoMatch1.6.8p4
OR
todd_millersudoMatch1.6.8p5
OR
todd_millersudoMatch1.6.8p6
OR
todd_millersudoMatch1.6.8p7
OR
todd_millersudoMatch1.6.8p8
OR
todd_millersudoMatch1.6.8p9
OR
todd_millersudoMatch1.6.8p10
OR
todd_millersudoMatch1.6.8p11
OR
todd_millersudoMatch1.6.8p12
OR
todd_millersudoMatch1.6.9
OR
todd_millersudoMatch1.6.9p1
OR
todd_millersudoMatch1.6.9p2
OR
todd_millersudoMatch1.6.9p3
OR
todd_millersudoMatch1.6.9p4
OR
todd_millersudoMatch1.6.9p5
OR
todd_millersudoMatch1.6.9p6
OR
todd_millersudoMatch1.6.9p7
OR
todd_millersudoMatch1.6.9p8
OR
todd_millersudoMatch1.6.9p9
OR
todd_millersudoMatch1.6.9p10
OR
todd_millersudoMatch1.6.9p11
OR
todd_millersudoMatch1.6.9p12
OR
todd_millersudoMatch1.6.9p13
OR
todd_millersudoMatch1.6.9p14
OR
todd_millersudoMatch1.6.9p15
OR
todd_millersudoMatch1.6.9p16
OR
todd_millersudoMatch1.6.9p17
OR
todd_millersudoMatch1.6.9p18
OR
todd_millersudoMatch1.6.9p19
OR
todd_millersudoMatch1.6.9p20
OR
todd_millersudoMatch1.6.9p21
OR
todd_millersudoMatch1.6.9p22
OR
todd_millersudoMatch1.7.0
OR
todd_millersudoMatch1.7.1
OR
todd_millersudoMatch1.7.2
OR
todd_millersudoMatch1.7.2p1
OR
todd_millersudoMatch1.7.2p2
OR
todd_millersudoMatch1.7.2p3
OR
todd_millersudoMatch1.7.2p4
OR
todd_millersudoMatch1.7.2p5
OR
todd_millersudoMatch1.7.2p6
OR
todd_millersudoMatch1.7.2p7

References

Related

freebsd 1
oraclelinux 1
nessus 16
openvas 21
centos 1
fedora 3
debian 2
prion 1
osv 1
securityvulns 2
debiancve 1
ubuntucve 1
veracode 1
cvelist 1
cve 1
ubuntu 1
redhat 1
gentoo 1
altlinux 2
vmware 2
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
Mandriva Linux Security Advisory : sudo (MDVSA-2010:118)
2010-06-18 00:00:00
FreeBSD : sudo -- Secure path vulnerability (d42e5b66-6ea0-11df-9c8d-00e0815b8da8)
2010-06-03 00:00:00
openvas
openvas
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
FreeBSD Ports: sudo
2010-06-03 00:00:00
centos
centos
sudo security update
2010-06-16 12:03:33
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
debian
debian
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
prion
prion
Path traversal
2010-06-07 17:12:00
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
Sudo protection bypass
2010-06-20 00:00:00
debiancve
debiancve
CVE-2010-1646
2010-06-07 17:12:48
ubuntucve
ubuntucve
CVE-2010-1646
2010-06-07 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:31
cvelist
cvelist
CVE-2010-1646
2010-06-07 14:00:00
cve
cve
CVE-2010-1646
2010-06-07 17:12:48
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2010-1646
freebsd1oraclelinux1nessus16openvas21centos1fedora3debian2prion1osv1securityvulns2debiancve1ubuntucve1veracode1cvelist1cve1ubuntu1redhat1gentoo1altlinux2vmware2