Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-722-1
HistoryFeb 17, 2009 - 12:00 a.m.

sudo vulnerability

2009-02-1700:00:00
ubuntu.com
48

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

39.9%

JSON

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04

Packages

  • sudo -

Details

Harald Koenig discovered that sudo did not correctly handle certain
privilege changes when handling groups. If a local attacker belonged
to a group included in a β€œRunAs” list in the /etc/sudoers file, that
user could gain root privileges. This was not an issue for the default
sudoers file shipped with Ubuntu.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchsudo<Β 1.6.9p17-1ubuntu2.1UNKNOWN
Ubuntu8.10noarchsudo<Β ldap-1.6.9p17-1ubuntu2.1UNKNOWN
Ubuntu8.04noarchsudo<Β 1.6.9p10-1ubuntu3.4UNKNOWN
Ubuntu8.04noarchsudo-ldap<Β 1.6.9p10-1ubuntu3.4UNKNOWN

Related

nessus 16
openvas 24
debiancve 2
ubuntucve 2
gentoo 1
freebsd 1
securityvulns 3
fedora 1
oraclelinux 1
veracode 1
redhat 1
prion 2
seebug 1
cve 2
vmware 1
nessus
nessus
Scientific Linux Security Update : sudo on SL5.x i386/x86_64
2012-08-01 00:00:00
Fedora 10 : sudo-1.6.9p17-5.fc10 (2009-1074)
2009-04-23 00:00:00
GLSA-200902-01 : sudo: Privilege escalation
2009-02-09 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:033 (sudo)
2009-02-10 00:00:00
Gentoo Security Advisory GLSA 200902-01 (sudo)
2009-02-10 00:00:00
Gentoo Security Advisory GLSA 200902-01 (sudo)
2009-02-10 00:00:00
debiancve
debiancve
CVE-2009-0034
2009-01-30 19:30:00
CVE-2011-0008
2011-01-20 19:00:00
ubuntucve
ubuntucve
CVE-2009-0034
2009-01-30 00:00:00
CVE-2011-0008
2011-01-20 00:00:00
gentoo
gentoo
sudo: Privilege escalation
2009-02-06 00:00:00
freebsd
freebsd
sudo -- certain authorized users could run commands as any user
2009-02-04 00:00:00
securityvulns
securityvulns
rPSA-2009-0021-1 sudo
2009-02-01 00:00:00
sudo privilege escalation
2009-02-01 00:00:00
sudo privilege escalation
2011-01-20 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: sudo-1.6.9p17-5.fc10
2009-02-05 02:08:39
oraclelinux
oraclelinux
sudo security update
2009-02-05 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:31:17
redhat
redhat
(RHSA-2009:0267) Moderate: sudo security update
2009-02-05 00:00:00
prion
prion
Authorization
2009-01-30 19:30:00
Authorization
2011-01-20 19:00:00
seebug
seebug
Todd Miller Sudo Runas_Aliasη»„ζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2009-02-19 00:00:00
cve
cve
CVE-2009-0034
2009-01-30 19:30:00
CVE-2011-0008
2011-01-20 19:00:00
vmware
vmware
ESX Service Console updates for udev, sudo, and curl
2009-07-10 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

39.9%

JSON
Related for USN-722-1
nessus16openvas24debiancve2ubuntucve2gentoo1freebsd1securityvulns3fedora1oraclelinux1veracode1redhat1prion2seebug1cve2vmware1