Authorization

🗓️ 20 Jan 2011 19:00:00Reported by PRIOn knowledge baseType

Certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 does not properly interpret a system group in the sudoers file during authorization decisions for a user who belongs to that group, allowing local users to gain root privileges via a sudo command

Reporter	Title	Published	Views	Family All 75
FreeBSD	sudo -- certain authorized users could run commands as any user	4 Feb 200900:00	–	freebsd
BDU FSTEC	The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2009-0034	30 Jan 200919:00	–	cve
CVE	CVE-2011-0008	20 Jan 201118:00	–	cve
Cvelist	CVE-2009-0034	30 Jan 200919:00	–	cvelist
Cvelist	CVE-2011-0008	20 Jan 201118:00	–	cvelist
Debian CVE	CVE-2009-0034	30 Jan 200919:00	–	debiancve
Debian CVE	CVE-2011-0008	20 Jan 201118:00	–	debiancve
Oracle linux	sudo security update	5 Feb 200900:00	–	oraclelinux
EUVD	EUVD-2011-0035	7 Oct 202500:30	–	euvd

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html
secunia	www.secunia.com/advisories/42968
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html
mandriva	www.mandriva.com/security/advisories
vupen	www.vupen.com/english/advisories/2011/0199
vupen	www.vupen.com/english/advisories/2011/0195
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/64965

13 Feb 2023 03:22Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00049