Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

valerio costamagna vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0426
sudo 1.6.x prior to 1.6.9p21 and 1.7.x prior to 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable fil...
Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.3 P7Todd Miller Sudo 1.6.8 P12Todd Miller Sudo 1.6.8 P2Todd Miller Sudo 1.6.8 P5Todd Miller Sudo 1.7.0Todd Miller Sudo 1.7.1Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.8 P7Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.7.2Todd Miller Sudo 1.7.2p1Todd Miller Sudo 1.6Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.7 P5Todd Miller Sudo 1.6.8 P1
NA
CVE-2010-1163
The command matching functionality in sudo 1.6.8 up to and including 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users ...
Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.8 P12Todd Miller Sudo 1.6.9 P17Todd Miller Sudo 1.6.9 P18Todd Miller Sudo 1.7.2p4Todd Miller Sudo 1.7.0Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.8 P9Todd Miller Sudo 1.6.8p7Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.7.2p3Todd Miller Sudo 1.6.8 P2Todd Miller Sudo 1.6.8 P5Todd Miller Sudo 1.6.9 P19Todd Miller Sudo 1.6.9 P20Todd Miller Sudo 1.6.9 P21Todd Miller Sudo 1.7.1Todd Miller Sudo 1.6.8 P7Todd Miller Sudo 1.6.8 P8Todd Miller Sudo 1.6.9 P22Todd Miller Sudo 1.7.2p1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4956validationCVE-2024-35221remote attackersCVE-2023-30309CVE-2024-36112CVE-2024-23109CVE-2023-43850stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook