CVE-2010-0426

Published: Feb 24, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

Affected (32)

Products: Todd Miller: Sudo

Todd Miller

1 product

Sudo

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Todd Miller Sudo	Version 1.6.1
Todd Miller Sudo	Version 1.6.2
Todd Miller Sudo	Version 1.6.3
Todd Miller Sudo	Version 1.6.3_p1
Todd Miller Sudo	Version 1.6.3_p2
Todd Miller Sudo	Version 1.6.3_p3
Todd Miller Sudo	Version 1.6.3_p4
Todd Miller Sudo	Version 1.6.3_p5
Todd Miller Sudo	Version 1.6.3_p6
Todd Miller Sudo	Version 1.6.3_p7
Todd Miller Sudo	Version 1.6.4_p1
Todd Miller Sudo	Version 1.6.4_p2
Todd Miller Sudo	Version 1.6.5_p1
Todd Miller Sudo	Version 1.6.5_p2
Todd Miller Sudo	Version 1.6.7_p5
Todd Miller Sudo	Version 1.6.8_p12
Todd Miller Sudo	Version 1.6.8_p1
Todd Miller Sudo	Version 1.6.8_p2
Todd Miller Sudo	Version 1.6.8_p5
Todd Miller Sudo	Version 1.6.8_p7
Todd Miller Sudo	Version 1.6.8_p8
Todd Miller Sudo	Version 1.6.8_p9
Todd Miller Sudo	Version 1.6.9_p17
Todd Miller Sudo	Version 1.6.9_p18
Todd Miller Sudo	Version 1.6.9_p19
Todd Miller Sudo	Version 1.6
Todd Miller Sudo	Version 1.7.0
Todd Miller Sudo	Version 1.7.1
Todd Miller Sudo	Version 1.7.2
Todd Miller Sudo	Version 1.7.2p1
Todd Miller Sudo	Version 1.7.2p2
Todd Miller Sudo	Version 1.7.2p3

Related CWEs

CWE-264

References (58)

ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz (unsafe URL)

Source: secalert@redhat.com

Patch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040578.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: secalert@redhat.com

http://secunia.com/advisories/38659

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38762

Source: secalert@redhat.com

http://secunia.com/advisories/38795

Source: secalert@redhat.com

http://secunia.com/advisories/38803

Source: secalert@redhat.com

http://secunia.com/advisories/38915

Source: secalert@redhat.com

http://secunia.com/advisories/39399

Source: secalert@redhat.com

http://securitytracker.com/id?1023658

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019

Source: secalert@redhat.com

http://sudo.ws/bugs/show_bug.cgi?id=389

Source: secalert@redhat.com

http://sudo.ws/repos/sudo/rev/88f3181692fe

Source: secalert@redhat.com

http://sudo.ws/repos/sudo/rev/f86e1b56d074

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2010-0075

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2006

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml

Source: secalert@redhat.com

http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:049

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/514489/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/38362

Source: secalert@redhat.com

Patch

http://www.sudo.ws/sudo/stable.html

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/USN-905-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0450

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/0949

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10814

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7238

Source: secalert@redhat.com

ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz (unsafe URL)