Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24065
HistoryApr 10, 2020 - 12:45 a.m.

Arbitrary Code Execution

2020-04-1000:45:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
arbitrary code execution
sudo
environment variables
local user
secure path
software

EPSS

0

Percentile

10.1%

JSON

sudo is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way sudo handled the presence of duplicated environment variables. A local user authorized to run commands using sudo could use this flaw to set additional values for the environment variables set by sudo, which could result in those values being used by the executed command instead of the values set by sudo. This could possibly lead to certain intended restrictions being bypassed, such as the secure_path setting.

References

Related

openvas 21
prion 1
oraclelinux 1
fedora 3
centos 1
osv 2
nessus 16
freebsd 1
debian 2
redhat 1
securityvulns 2
ubuntu 1
nvd 1
cve 1
debiancve 1
cvelist 1
ubuntucve 1
altlinux 2
gentoo 1
vmware 2
openvas
openvas
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
Fedora Update for sudo FEDORA-2010-9415
2010-06-25 00:00:00
prion
prion
Path traversal
2010-06-07 17:12:00
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
centos
centos
sudo security update
2010-06-16 12:03:33
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
sudo-1.8.18p1-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
Debian DSA-2062-1 : sudo - missing input sanitization
2010-06-21 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : sudo vulnerability (USN-956-1)
2010-07-01 00:00:00
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
debian
debian
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
[SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
2010-06-17 09:19:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
securityvulns
securityvulns
Sudo protection bypass
2010-06-20 00:00:00
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
nvd
nvd
CVE-2010-1646
2010-06-07 17:12:48
cve
cve
CVE-2010-1646
2010-06-07 17:12:48
debiancve
debiancve
CVE-2010-1646
2010-06-07 17:12:48
cvelist
cvelist
CVE-2010-1646
2010-06-07 14:00:00
ubuntucve
ubuntucve
CVE-2010-1646
2010-06-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00

EPSS

0

Percentile

10.1%

JSON
Related for VERACODE:24065
openvas21prion1oraclelinux1fedora3centos1osv2nessus16freebsd1debian2redhat1securityvulns2ubuntu1nvd1cve1debiancve1cvelist1ubuntucve1altlinux2gentoo1vmware2