Lucene search
K

4723 matches found

UbuntuCve
UbuntuCve
added 2011/01/24 12:0 a.m.33 views

CVE-2010-3853

pamnamespace.c in the pamnamespace module in Linux-PAM aka pam before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pamnamespace PAM...

6.9CVSS6.6AI score0.00416EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/24 12:0 a.m.51 views

Fedora Update for sudo FEDORA-2011-0455

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2011-0455 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

6.9CVSS0.00496EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/01/24 12:0 a.m.20 views

FreeBSD Ports: sudo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.4CVSS7.4AI score0.00496EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2011/01/24 12:0 a.m.19 views

Fedora Update for sudo FEDORA-2011-0455

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.9CVSS7.7AI score0.00496EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/24 12:0 a.m.22 views

Mandriva Update for sudo MDVSA-2011:018 (sudo)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS7.6AI score0.00496EPSS
Exploits1References3
Fedora
Fedora
added 2011/01/21 11:0 p.m.45 views

[SECURITY] Fedora 13 Update: sudo-1.7.4p5-1.fc13

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

6.9CVSS2.2AI score0.00496EPSS
Exploits0
OpenVAS
OpenVAS
added 2011/01/21 12:0 a.m.18 views

Ubuntu Update for sudo vulnerability USN-1046-1

Ubuntu Update for Linux kernel vulnerabilities USN-1046-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10461.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for sudo vulnerability USN-1046-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

4.4CVSS7.6AI score0.00496EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/21 12:0 a.m.22 views

Fedora Update for sudo FEDORA-2011-0470

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2011-0470 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

6.9CVSS0.00496EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2011/01/21 12:0 a.m.25 views

Ubuntu 9.10 / 10.04 LTS / 10.10 : sudo vulnerability (USN-1046-1)

Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the RunasSpec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group RunasSpec i...

4.4CVSS8AI score0.00496EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/21 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-1046-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS7.5AI score0.00496EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/01/21 12:0 a.m.21 views

Fedora Update for sudo FEDORA-2011-0470

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.9CVSS7.7AI score0.00496EPSS
Exploits0References2
NVD
NVD
added 2011/01/20 7:0 p.m.16 views

CVE-2011-0008

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain roo...

6.9CVSS7.4AI score0.00333EPSS
Exploits0References8
Prion
Prion
added 2011/01/20 7:0 p.m.23 views

Authorization

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain roo...

6.9CVSS6.4AI score0.00406EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2011/01/20 6:0 p.m.30 views

CVE-2011-0008

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain roo...

7.4AI score0.00333EPSS
Exploits0References8
CVE
CVE
added 2011/01/20 6:0 p.m.85 views

CVE-2011-0008

CVE-2011-0008 relates to a bug in parse.c of sudo before 1.7.4p5-1.fc14 (Fedora 14) where a system group (the %group) in sudoers could be misinterpreted during authorization for a user who belongs to that group. This regression (tied to CVE-2009-0034) allows a local user to leverage an applicable...

6.9CVSS7.3AI score0.00333EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2011/01/20 6:0 p.m.35 views

CVE-2011-0008

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain roo...

6.9CVSS6AI score0.00333EPSS
Exploits0
Ubuntu
Ubuntu
added 2011/01/20 3:30 p.m.48 views

USN-1046-1: Sudo vulnerability

Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the RunasSpec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group RunasSpec i...

4.4CVSS8AI score0.00496EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2011/01/20 12:0 a.m.2 views

PT-2011-2010 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo versions prior to 1.7.4p5-1.fc14 Description: The issue arises from improper interpretation of a system group in the sudoers file, allowing local users to gain root privileges via a sudo command. This is a result of a regression related ...

6.9CVSS7.6AI score0.00333EPSS
Exploits0References9
securityvulns
securityvulns
added 2011/01/20 12:0 a.m.47 views

[USN-1046-1] Sudo vulnerability

=========================================================== Ubuntu Security Notice USN-1046-1 January 20, 2011 sudo vulnerability CVE-2011-0010 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS Ubuntu...

4.4CVSS0.1AI score0.00496EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/01/19 12:0 a.m.22 views

Fedora 14 : sudo-1.7.4p5-1.fc14 (2011-0470)

rebase to 1.7.4p5 - fixed sudo-1.7.4p4-getgrouplist.patch - fixes CVE-2011-0008, CVE-2011-0010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

7.8CVSS7.4AI score0.00496EPSS
Exploits1References6
Rows per page
Query Builder