← Back

CVE-2013-1775

nvd nist
Published: Mar 5, 2013Modified: Apr 29, 2026

JSON object

Loading...
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD

Description

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

Affected (80)

1 product
Sudo
1 product
Mac Os X
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Todd Miller
Version 1.6.1
Version 1.6.2
Version 1.6.2p3
Version 1.6.3
Version 1.6.3_p7
Version 1.6.4
Version 1.6.4p2
Version 1.6.5
Version 1.6.6
Version 1.6.7
Version 1.6.7p5
Version 1.6.8
Version 1.6.8p12
Version 1.6.9
Version 1.6.9p20
Version 1.6.9p21
Version 1.6.9p22
Version 1.6.9p23
Version 1.6
Configuration B
25 vulnerable
Vulnerable SoftwareAffected Versions
Todd Miller
Version 1.8.0
Version 1.8.1
Version 1.8.1p1
Version 1.8.1p2
Version 1.8.2
Version 1.8.3
Version 1.8.3p1
Version 1.8.3p2
Version 1.8.4
Version 1.8.4p1
Version 1.8.4p2
Version 1.8.4p3
Version 1.8.4p4
Version 1.8.4p5
Version 1.8.5
Version 1.8.5p1
Version 1.8.5p2
Version 1.8.5p3
Version 1.8.6
Version 1.8.6p1
Version 1.8.6p2
Version 1.8.6p3
Version 1.8.6p4
Version 1.8.6p5
Version 1.8.6p6
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 10.10.4
Configuration D
35 vulnerable
Vulnerable SoftwareAffected Versions
Todd Miller
Version 1.7.0
Version 1.7.10
Version 1.7.10p1
Version 1.7.10p2
Version 1.7.10p3
Version 1.7.10p4
Version 1.7.10p5
Version 1.7.10p6
Version 1.7.1
Version 1.7.2
Version 1.7.2p1
Version 1.7.2p2
Version 1.7.2p3
Version 1.7.2p4
Version 1.7.2p5
Version 1.7.2p6
Version 1.7.2p7
Version 1.7.3b1
Version 1.7.4
Version 1.7.4p1
Version 1.7.4p2
Version 1.7.4p3
Version 1.7.4p4
Version 1.7.4p5
Version 1.7.4p6
Version 1.7.5
Version 1.7.6
Version 1.7.6p1
Version 1.7.6p2
Version 1.7.7
Version 1.7.8
Version 1.7.8p1
Version 1.7.8p2
Version 1.7.9
Version 1.7.9p1

Related CWEs

References (34)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
ExploitPatch
Source: secalert@redhat.com
ExploitPatch
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.