Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-1646
HistoryJun 07, 2010 - 12:00 a.m.

CVE-2010-1646

2010-06-0700:00:00
ubuntu.com
ubuntu.com
12

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0
through 1.7.2p6 does not properly handle an environment that contains
multiple PATH variables, which might allow local users to gain privileges
via a crafted value of the last PATH variable.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsudo< 1.6.8p12-1ubuntu6.3UNKNOWN
ubuntu8.04noarchsudo< 1.6.9p10-1ubuntu3.8UNKNOWN
ubuntu9.04noarchsudo< 1.6.9p17-1ubuntu3.3UNKNOWN
ubuntu9.10noarchsudo< 1.7.0-1ubuntu2.4UNKNOWN
ubuntu10.04noarchsudo< 1.7.2p1-1ubuntu5.1UNKNOWN

Related

oraclelinux 1
nessus 16
osv 1
debian 2
openvas 21
fedora 3
prion 1
centos 1
freebsd 1
securityvulns 2
debiancve 1
cve 1
ubuntu 1
redhat 1
veracode 1
altlinux 2
gentoo 1
vmware 2
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
FreeBSD : sudo -- Secure path vulnerability (d42e5b66-6ea0-11df-9c8d-00e0815b8da8)
2010-06-03 00:00:00
CentOS 5 : sudo (CESA-2010:0475)
2010-06-17 00:00:00
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
debian
debian
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
openvas
openvas
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
FreeBSD Ports: sudo
2010-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
prion
prion
Path traversal
2010-06-07 17:12:00
centos
centos
sudo security update
2010-06-16 12:03:33
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
Sudo protection bypass
2010-06-20 00:00:00
debiancve
debiancve
CVE-2010-1646
2010-06-07 17:12:00
cve
cve
CVE-2010-1646
2010-06-07 17:12:00
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:31
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for UB:CVE-2010-1646
oraclelinux1nessus16osv1debian2openvas21fedora3prion1centos1freebsd1securityvulns2debiancve1cve1ubuntu1redhat1veracode1altlinux2gentoo1vmware2