USN-983-1: Sudo vulnerability

🗓️ 07 Sep 2010 13:40:36Reported by UbuntuType

ubuntu

ubuntu🔗 ubuntu.com👁 39 Views

Sudo vulnerability in Ubuntu 10.04 and 9.10, allows local attacker to execute arbitrary code as roo

Reporter	Title	Published	Views	Family All 65
FreeBSD	sudo -- Flaw in Runas group matching	7 Sep 201000:00	–	freebsd
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : sudo (CESA-2010:0675)	13 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 14 : sudo-1.7.4p4-1.fc14 (2010-14184)	16 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 13 : sudo-1.7.4p4-1.fc13 (2010-14355)	12 Sep 201000:00	–	nessus
Tenable Nessus	Fedora 12 : sudo-1.7.4p4-2.fc12 (2010-14996)	6 Oct 201000:00	–	nessus
Tenable Nessus	FreeBSD : sudo -- Flaw in Runas group matching (67b514c3-ba8f-11df-8f6e-000c29a67389)	8 Sep 201000:00	–	nessus
Tenable Nessus	GLSA-201009-03 : sudo: Privilege Escalation	8 Sep 201000:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : sudo (MDVSA-2010:175)	13 Sep 201000:00	–	nessus
Tenable Nessus	MiracleLinux 3 : sudo-1.7.2p1-8.AXS3 (AXSA:2010-437:05)	14 Jan 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	9.10	any	sudo-ldap	1.7.0-1ubuntu2.5	sudo-ldap_1.7.0-1ubuntu2.5_any.deb
Ubuntu	10.04	any	sudo-ldap	1.7.2p1-1ubuntu5.2	sudo-ldap_1.7.2p1-1ubuntu5.2_any.deb

07 Sep 2010 13:40Current

8.6High risk

Vulners AI Score8.6

CVSS 26.2

EPSS0.00362

sudo vulnerability ubuntu 10.04 ubuntu 9.10 local attacker arbitrary code root access