CVE-2005-1993

Published: 20/06/2005 Updated: 19/10/2018

CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9

VMScore: 329

Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
todd miller sudo 1.5.8
todd miller sudo 1.6.3 p6
todd miller sudo 1.3.1
todd miller sudo 1.5.9
todd miller sudo 1.6.6
todd miller sudo 1.6.8 p7
todd miller sudo 1.6.3
todd miller sudo 1.6.4 p2
todd miller sudo 1.6.1
todd miller sudo 1.6.3 p5
todd miller sudo 1.5.7
todd miller sudo 1.6.2
todd miller sudo 1.6.8
todd miller sudo 1.6.4 p1
todd miller sudo 1.6.3 p2
todd miller sudo 1.6.3 p4
todd miller sudo 1.6.5 p2
todd miller sudo 1.6.5
todd miller sudo 1.6.3 p3
todd miller sudo 1.6.8 p1
todd miller sudo 1.6.5 p1
todd miller sudo 1.6.3 p7
todd miller sudo 1.6
todd miller sudo 1.6.4
todd miller sudo 1.6.7
todd miller sudo 1.6.8 p8
todd miller sudo 1.6.3 p1
todd miller sudo 1.5.6
todd miller sudo 1.6.7 p5

Synopsis sudo security update Type/Severity Security Advisory: Moderate Topic An updated sudo package is available that fixes a race condition in sudo'spathname validationThis update has been rated as having moderate security impact by the RedHat Security Response Team Description The sud ...

Charles Morris discovered a race condition in sudo which could lead to privilege escalation If /etc/sudoers allowed a user the execution of selected programs, and this was followed by another line containing the pseudo-command “ALL”, that user could execute arbitrary commands with sudo by creating symbolic links at a certain time ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/402741 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116 http://www.securityfocus.com/bid/13993 http://www.sudo.ws/sudo/alerts/path_race.html http://www.debian.org/security/2005/dsa-735 http://www.redhat.com/support/errata/RHSA-2005-535.html http://docs.info.apple.com/article.html?artnum=302847 http://www.securityfocus.com/bid/15647 http://secunia.com/advisories/15744 http://secunia.com/advisories/17813 http://www.osvdb.org/17396 http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.vupen.com/english/advisories/2005/0821 http://www.vupen.com/english/advisories/2005/2659 https://exchange.xforce.ibmcloud.com/vulnerabilities/21080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341 http://www.securityfocus.com/archive/1/425974/100/0/threaded https://access.redhat.com/errata/RHSA-2005:535 https://nvd.nist.gov https://usn.ubuntu.com/142-1/

CVE-2005-1993

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect