Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

todd miller sudo 1.6.9p17 vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2

CVE-2011-0008

A certain Fedora patch for parse.c in sudo prior to 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudo...
Todd Miller SudoTodd Miller Sudo 1.3.1Todd Miller Sudo 1.5Todd Miller Sudo 1.5.2Todd Miller Sudo 1.5.3Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.5.8Todd Miller Sudo 1.5.9Todd Miller Sudo 1.6Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.2p1Todd Miller Sudo 1.6.2p2Todd Miller Sudo 1.6.2p3Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.3 P6
6.9
CVSSv2

CVE-2010-0426

sudo 1.6.x prior to 1.6.9p21 and 1.7.x prior to 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable fil...
Todd Miller Sudo 1.6.9 P18Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.8 P7Todd Miller Sudo 1.7.0Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.8 P12Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.7.1Todd Miller Sudo 1.7.2p2Todd Miller Sudo 1.7.2Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.8 P9Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.7.2p1Todd Miller Sudo 1.7.2p3Todd Miller Sudo 1.6.8 P1
6.2
CVSSv2

CVE-2010-1646

The secure path feature in env.c in sudo 1.3.1 up to and including 1.6.9p22 and 1.7.0 up to and including 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH v...
Todd Miller Sudo 1.6.3p1Todd Miller Sudo 1.6.9p1Todd Miller Sudo 1.6.8p1Todd Miller Sudo 1.6.3p3Todd Miller Sudo 1.3.1Todd Miller Sudo 1.7.2p4Todd Miller Sudo 1.6.6Todd Miller Sudo 1.6.3p2Todd Miller Sudo 1.6.9p14Todd Miller Sudo 1.6.9p17Todd Miller Sudo 1.7.0Todd Miller Sudo 1.6.8p5Todd Miller Sudo 1.6.7p3Todd Miller Sudo 1.6.8p8Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.8p2Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.9p15Todd Miller Sudo 1.6.7p1Todd Miller Sudo 1.6.9p20Todd Miller Sudo 1.7.1Todd Miller Sudo 1.7.2p2
4.4
CVSSv2

CVE-2010-0427

sudo 1.6.x prior to 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.
Todd Miller Sudo 1.6.9 P18Todd Miller Sudo 1.6.3 P6Todd Miller Sudo 1.6.6Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.1Todd Miller Sudo 1.6.8 P12Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.8 P9Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.6.5Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.9 P19Todd Miller Sudo 1.6.9 P17Todd Miller Sudo 1.6.3 P7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook