Published: 24/02/2010 Updated: 10/10/2018

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

sudo 1.6.x prior to 1.6.9p21 and 1.7.x prior to 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
todd miller sudo 1.6.1
todd miller sudo 1.6.2
todd miller sudo 1.6.3_p6
todd miller sudo 1.6.3_p7
todd miller sudo 1.6.8_p12
todd miller sudo 1.6.8_p2
todd miller sudo 1.6.8_p5
todd miller sudo 1.7.0
todd miller sudo 1.7.1
todd miller sudo 1.6.3
todd miller sudo 1.6.3_p1
todd miller sudo 1.6.4_p1
todd miller sudo 1.6.4_p2
todd miller sudo 1.6.8_p7
todd miller sudo 1.6.8_p8
todd miller sudo 1.7.2
todd miller sudo 1.7.2p1
todd miller sudo 1.6
todd miller sudo 1.6.3_p4
todd miller sudo 1.6.3_p5
todd miller sudo 1.6.7_p5
todd miller sudo 1.6.8_p1
todd miller sudo 1.6.9_p18
todd miller sudo 1.6.9_p19
todd miller sudo 1.6.3_p2
todd miller sudo 1.6.3_p3
todd miller sudo 1.6.5_p1
todd miller sudo 1.6.5_p2
todd miller sudo 1.6.8_p9
todd miller sudo 1.6.9_p17
todd miller sudo 1.7.2p2
todd miller sudo 1.7.2p3

Synopsis Important: sudo security update Type/Severity Security Advisory: Important Topic An updated sudo package that fixes two security issues is now available forRed Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team Descri ...

Synopsis Moderate: sudo security update Type/Severity Security Advisory: Moderate Topic An updated sudo package that fixes one security issue is now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability Scor ...

Debian Bug report logs - #578275 CVE-2010-1163: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426 Package: sudo; Maintainer for sudo is Bdale Garbee <bdale@gagcom>; Source for sudo is src:sudo (PTS, buildd, popcon) Reported by: Luciano Bello <luciano@debianorg> Date: Sun, 18 Apr 2010 15:21:01 ...

Debian Bug report logs - #570737 sudoedit permission in sudoers grants permission to any sudoedit executables Package: sudo; Maintainer for sudo is Bdale Garbee <bdale@gagcom>; Source for sudo is src:sudo (PTS, buildd, popcon) Reported by: neonsignal-debian@memepressorg Date: Sun, 21 Feb 2010 03:33:02 UTC Severity: grav ...

Valerio Costamagna discovered that sudo did not properly validate the path for the ‘sudoedit’ pseudo-command when the PATH contained only a dot (‘’) If secure_path and ignore_dot were disabled, a local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use sudoedit By default, se ...

It was discovered that sudo did not properly validate the path for the ‘sudoedit’ pseudo-command A local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use sudoedit The sudoedit pseudo-command is not used in the default installation of Ubuntu (CVE-2010-0426) ...

Several vulnerabilities have been discovered in sudo, a program designed to allow a sysadmin to give limited root privileges to users The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-0426 It was discovered that sudo when a pseudo-command is enabled, permits a match between the name of the pseudo-command ...

sudoedit as found in sudo versions 172p5 and below fails to verify the path of the executable and therefore allows for an easy to exploit local privilege escalation vulnerability ...

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 - Privilege escalation with sudo and sudoedit

CVE-2010-0426 wwwcvedetailscom/cve/CVE-2010-0426/ sudo 16x before 169p21 and 17x before 172p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit

Sudo 1.6.x <= 1.6.9p21 and 1.7.x <= 1.7.2p4 Local Privilege Escalation and vulnerable container

Sudo 16x<=169p21 and 17x<=172p4 Local Privilege Escalation Sudo (su "do") allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root while logging all commands and arguments Vulnerable environment To setup a vulnerable environment for your test you will need Docker installed, and ju

cve-2010-0426

CVE-2010-0426 This is part of Cved: a tool to manage vulnerable docker containers Cved: githubcom/git-rep-src/cved Image source: githubcom/cved-sources/cve-2010-0426 Image author: githubcom/t0kx/privesc-CVE-2010-0426

CWE-264 ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz http://www.sudo.ws/sudo/stable.html http://sudo.ws/repos/sudo/rev/88f3181692fe http://www.vupen.com/english/advisories/2010/0450 http://www.securityfocus.com/bid/38362 http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737 http://secunia.com/advisories/38659 http://sudo.ws/repos/sudo/rev/f86e1b56d074 http://sudo.ws/bugs/show_bug.cgi?id=389 http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html http://secunia.com/advisories/38915 http://secunia.com/advisories/38795 http://www.ubuntu.com/usn/USN-905-1 http://www.mandriva.com/security/advisories?name=MDVSA-2010:049 http://securitytracker.com/id?1023658 http://secunia.com/advisories/38803 http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml http://secunia.com/advisories/39399 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019 http://www.vupen.com/english/advisories/2010/0949 http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040578.html http://www.debian.org/security/2010/dsa-2006 http://secunia.com/advisories/38762 http://wiki.rpath.com/Advisories:rPSA-2010-0075 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7238 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10814 http://www.securityfocus.com/archive/1/514489/100/0/threaded https://access.redhat.com/errata/RHSA-2010:0122 https://nvd.nist.gov https://usn.ubuntu.com/928-1/

CVE-2010-0426

Vulnerability Summary

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect