Security fix for the ALT Linux 5 package sudo version 1:1.6.8p12-alt7

Feb. 23, 2010 Dmitry V. Levin 1:1.6.8p12-alt7 - Backported upstream fix for CVE-2010-0426 a flaw in sudoedit could give a user with permission to run sudoedit the ability to run arbitrary commands...

Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt7

Feb. 23, 2010 Dmitry V. Levin 1:1.6.8p12-alt7 - Backported upstream fix for CVE-2010-0426 a flaw in sudoedit could give a user with permission to run sudoedit the ability to run arbitrary commands; envreset sudoers option had to be explicitly disabled to make an attack possible...

Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt7

Feb. 23, 2010 Dmitry V. Levin 1:1.6.8p12-alt7 - Backported upstream fix for CVE-2010-0426 a flaw in sudoedit could give a user with permission to run sudoedit the ability to run arbitrary commands; envreset sudoers option had to be explicitly disabled to make an attack possible...

CVE-2009-4648

Accellion Secure File Transfer Appliance before 80105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via 1 arbitrary arguments in the --filemove action in /usr/local/bin/admin.pl, or a...

CVE-2009-4648: Undefined Security Weakness

Accellion Secure File Transfer Appliance before 80105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via 1 arbitrary arguments in the --filemove action in /usr/local/bin/admin.pl, or a...

sudo -- Privilege escalation with sudoedit

Todd Miller reports: When sudo performs its command matching, there is a special case for pseudo-commands in the sudoers file currently, the only pseudo-command is sudoedit. Unlike a regular command, pseudo-commands do not begin with a slash '/'. The flaw is that sudo's the matching code would on...

SLES9: Security update for sudo

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: sudo More details may also be found by searching for keyword 5015295 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for sudo

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: sudo For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019263 within the SuSE...

SLES9: Security update for sudo

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: sudo More details may also be found by searching for keyword 5015295 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for sudo

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: sudo For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019263 within the SuSE...

openSUSE Security Update : sudo (sudo-472)

This update of sudo fixes a bug that allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sudo-47...

openSUSE Security Update : sudo (sudo-472)

This update of sudo fixes a bug that allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sudo-47...

VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...

FreeBSD : sudo -- privilege escalation with bash scripts (bdd1537b-354c-11d9-a9e7-0001020eed82)

A Sudo Security Alerts reports : A flaw in exists in sudo's environment sanitizing prior to sudo version 1.6.8p2 that could allow a malicious user with permission to run a shell script that utilized the bash shell to run arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 10 : sudo-1.6.9p17-5.fc10 (2009-1074)

Fix for incorrect handling of groups in RunasUser Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Mandriva Linux Security Advisory : sudo (MDVSA-2009:033)

A vulnerability has been identified in sudo which allowed - depending on the sudoers rules - a sudo-user to execute arbitrary shell commands as root CVE-2009-0034. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Ubuntu 8.04 LTS / 8.10 : sudo vulnerability (USN-722-1)

Harald Koenig discovered that sudo did not correctly handle certain privilege changes when handling groups. If a local attacker belonged to a group included in a 'RunAs' list in the /etc/sudoers file, that user could gain root privileges. This was not an issue for the default sudoers file shipped...

FreeBSD : sudo -- sudoedit information disclosure (a268ef4a-0b35-11d9-8a8a-000c41e2cdad)

A new feature of sudo 1.6.8 called 'sudoedit' a safe editing facility may allow users to read files to which they normally have no access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

Todd Miller Sudo Runas_Alias组本地权限提升漏洞

BUGTRAQ ID: 33517 CVECAN ID: CVE-2009-0034 Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。 sudo在确认用户属于哪个组的时候sudo中的parse.c文件没有正确地解释sudoer配置文件中的系统组（也被称为%group），本地用户可以利用run-as-user-in-group功能无需口令认证便以root用户权限执行sudo命令。 Todd Miller Sudo 1.6.9p17 - 1.6.9p19 厂商补丁： RedHat ------...

Ubuntu USN-722-1 (sudo)

The remote host is missing an update to sudo announced via advisory USN-722-1. OpenVAS Vulnerability Test $Id: ubuntu7221.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7221.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-722-1 sudo Authors: Thomas Reinke...