Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29

Export CSV
CVE-2012-0809

sudo: format string flaw in sudo_debug()

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

CVSS 2.0 · 7.2 High EPSS 2.9% KEV · Not listed
Vendors
Todd Miller
Products
Sudo
CVE-2012-2337

sudo: Multiple netmask values used in Host / Host_List configuration cause any host to be allowed access

sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Enterprise Linux Sudo
CVE-2012-3440

sudo: insecure temporary file use in RPM %postun script

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.

CVSS 2.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Enterprise Linux Sudo
CVE-2013-1775

sudo: authentication bypass via reset system clock

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

CVSS 2.0 · 6.9 Medium EPSS 3.2% KEV · Not listed
Vendors
Apple Redhat Todd Miller
Products
Mac Os X Enterprise Linux Sudo
CVE-2013-1776

sudo: bypass of tty_tickets constraints

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Redhat Todd Miller
Products
Mac Os X Enterprise Linux Sudo
CVE-2013-2776

sudo: bypass of tty_tickets constraints

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Redhat Todd Miller
Products
Mac Os X Enterprise Linux Sudo
CVE-2013-2777

sudo: bypass of tty_tickets constraints

sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Redhat Todd Miller
Products
Mac Os X Enterprise Linux Sudo
CVE-2010-0427

sudo: Fails to reset group permissions if runas_default set

sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Enterprise Linux Sudo
CVE-2010-0426

sudo: sudoedit option can possibly allow for arbitrary code execution

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

CVSS 2.0 · 6.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Enterprise Linux Sudo