Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-0010
HistoryJan 18, 2011 - 6:03 p.m.

CVE-2011-0010

2011-01-1818:03:08
CWE-264
[email protected]
web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.

Affected configurations

NVD
Node
todd_millersudoMatch1.7.0
OR
todd_millersudoMatch1.7.1
OR
todd_millersudoMatch1.7.2
OR
todd_millersudoMatch1.7.2p1
OR
todd_millersudoMatch1.7.2p2
OR
todd_millersudoMatch1.7.2p3
OR
todd_millersudoMatch1.7.2p4
OR
todd_millersudoMatch1.7.2p5
OR
todd_millersudoMatch1.7.2p6
OR
todd_millersudoMatch1.7.2p7
OR
todd_millersudoMatch1.7.3b1
OR
todd_millersudoMatch1.7.4
OR
todd_millersudoMatch1.7.4p1
OR
todd_millersudoMatch1.7.4p2
OR
todd_millersudoMatch1.7.4p3
OR
todd_millersudoMatch1.7.4p4

References

Related

cve 1
freebsd 1
oraclelinux 2
nessus 19
openvas 20
slackware 1
ubuntu 1
prion 1
redhat 3
ubuntucve 1
veracode 1
cvelist 1
debiancve 1
securityvulns 2
fedora 2
gentoo 1
cve
cve
CVE-2011-0010
2011-01-18 18:03:08
freebsd
freebsd
sudo -- local privilege escalation
2011-01-11 00:00:00
oraclelinux
oraclelinux
sudo security and bug fix update
2011-05-28 00:00:00
sudo security and bug fix update
2012-03-01 00:00:00
nessus
nessus
Scientific Linux Security Update : sudo on SL6.x i386/x86_64
2012-08-01 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 / 9.0 / 9.1 / current : sudo (SSA:2011-041-05)
2011-02-11 00:00:00
Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20120221)
2012-08-01 00:00:00
openvas
openvas
RedHat Update for sudo RHSA-2011:0599-01
2012-06-06 00:00:00
RedHat Update for sudo RHSA-2012:0309-03
2012-02-21 00:00:00
Oracle: Security Advisory (ELSA-2012-0309)
2015-10-06 00:00:00
slackware
slackware
[slackware-security] sudo
2011-02-11 01:18:11
ubuntu
ubuntu
Sudo vulnerability
2011-01-20 00:00:00
prion
prion
Authentication flaw
2011-01-18 18:03:00
redhat
redhat
(RHSA-2012:0309) Low: sudo security and bug fix update
2012-02-21 00:00:00
(RHSA-2011:0599) Low: sudo security and bug fix update
2011-05-19 00:00:00
(RHSA-2012:0168) Important: rhev-hypervisor5 security and bug fix update
2012-02-21 00:00:00
ubuntucve
ubuntucve
CVE-2011-0010
2011-01-18 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:01:50
cvelist
cvelist
CVE-2011-0010
2011-01-18 17:00:00
debiancve
debiancve
CVE-2011-0010
2011-01-18 18:03:08
securityvulns
securityvulns
[USN-1046-1] Sudo vulnerability
2011-01-20 00:00:00
sudo privilege escalation
2011-01-20 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: sudo-1.7.4p5-1.fc14
2011-01-18 21:40:13
[SECURITY] Fedora 13 Update: sudo-1.7.4p5-1.fc13
2011-01-21 23:00:08
gentoo
gentoo
sudo: Privilege escalation
2012-03-06 00:00:00

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON
Related for NVD:CVE-2011-0010
cve1freebsd1oraclelinux2nessus19openvas20slackware1ubuntu1prion1redhat3ubuntucve1veracode1cvelist1debiancve1securityvulns2fedora2gentoo1