Lucene search
RootSSV:19186HistoryFeb 25, 2010 - 12:00 a.m.
Sudo sudoedit命令本地权限提升漏洞
2010-02-2500:00:00
Root
www.seebug.org
25
0.0004 Low
EPSS
Percentile
8.6%
BUGTRAQ ID: 38362
CVE(CAN) ID: CVE-2010-0426
Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。
由于处理sudoedit命令时的错误，拥有sudoedit权限的本地用户可以以root用户权限执行任意代码。成功攻击要求sudoedit命令没有在sudoers文件中指定完整路径。
Todd Miller Sudo 1.7
Todd Miller Sudo 1.6
Todd Miller
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
openvas
openvas
Ubuntu Update for sudo vulnerability USN-928-1
2010-04-16 00:00:00
Mandriva Update for mailcap MDVA-2010:049 (mailcap)
2010-02-08 00:00:00
Fedora Update for sudo FEDORA-2010-3415
2010-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: sudo-1.7.2p5-1.fc12
2010-03-06 03:53:38
[SECURITY] Fedora 13 Update: sudo-1.7.2p5-1.fc13
2010-03-10 06:46:05
[SECURITY] Fedora 11 Update: sudo-1.7.2p5-1.fc11
2010-03-09 03:13:16
nessus
nessus
FreeBSD : sudo -- Privilege escalation with sudoedit (018a84d0-2548-11df-b4a3-00e0815b8da8)
2010-03-02 00:00:00
Mandriva Linux Security Advisory : sudo (MDVSA-2010:049)
2010-02-26 00:00:00
securityvulns
securityvulns
[USN-928-1] Sudo vulnerability
2010-04-19 00:00:00
[ MDVSA-2010:049 ] sudo
2010-03-01 00:00:00
sudoedit local privilege escalation through PATH manipulation
2010-04-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-0426
2010-02-23 00:00:00
CVE-2010-1163
2010-04-16 00:00:00
debiancve
debiancve
CVE-2010-0426
2010-02-24 18:30:00
CVE-2010-1163
2010-04-16 19:30:00
altlinux
altlinux
Security fix for the ALT Linux 5 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt7
2010-02-23 00:00:00
freebsd
freebsd
sudo -- Privilege escalation with sudoedit
2010-01-29 00:00:00
prion
prion
Directory traversal
2010-02-24 18:30:00
Command injection
2010-04-16 19:30:00
ubuntu
ubuntu
Sudo vulnerability
2010-04-15 00:00:00
sudo vulnerabilities
2010-02-26 00:00:00
cve
cve
CVE-2010-0426
2010-02-24 18:30:00
CVE-2010-1163
2010-04-16 19:30:00
veracode
veracode
Privilege Escalation
2020-04-10 00:42:18
Arbitrary Code Execution
2020-04-10 00:48:33
redhat
redhat
(RHSA-2010:0361) Moderate: sudo security update
2010-04-20 00:00:00
(RHSA-2010:0122) Important: sudo security update
2010-02-26 00:00:00
(RHSA-2010:0172) Important: rhev-hypervisor security and bug fix update
2010-03-24 00:00:00
debian
debian
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
osv
osv
sudo - several vulnerabilities
2010-03-02 00:00:00
centos
centos
sudo security update
2010-05-28 10:47:01
sudo security update
2010-03-01 18:44:36
slackware
slackware
[slackware-security] sudo
2010-04-20 17:51:19
oraclelinux
oraclelinux
sudo security update
2010-02-26 00:00:00
sudo security update
2010-04-20 00:00:00
packetstorm
packetstorm
Sudo 1.7.2p5 Local Privilege Escalation
2010-04-20 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2010-03-03 00:00:00
vmware
vmware
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00