CVE

Id
43011  
CVE No.
CVE-2010-0427  
Status
Candidate  
Description
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469008 43011 CVE-2010-0427 BUGTRAQ:20101027 rPSA-2010-0075-1 sudo  View
469009 43011 CVE-2010-0427 URL:http://www.securityfocus.com/archive/1/archive/1/514489/100/0/threaded  View
469010 43011 CVE-2010-0427 MLIST:[oss-security] 20100223 CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set  View
469011 43011 CVE-2010-0427 URL:http://www.openwall.com/lists/oss-security/2010/02/23/4  View
469012 43011 CVE-2010-0427 MLIST:[oss-security] 20100224 Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set  View
469013 43011 CVE-2010-0427 URL:http://www.openwall.com/lists/oss-security/2010/02/24/5  View
469014 43011 CVE-2010-0427 CONFIRM:ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz  View
469015 43011 CVE-2010-0427 CONFIRM:http://sudo.ws/repos/sudo/rev/aa0b6c01c462  View
469016 43011 CVE-2010-0427 CONFIRM:http://www.gratisoft.us/bugzilla/attachment.cgi?id=255  View
469017 43011 CVE-2010-0427 CONFIRM:http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349  View
469018 43011 CVE-2010-0427 CONFIRM:http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8  View
469019 43011 CVE-2010-0427 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=567622  View
469020 43011 CVE-2010-0427 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2010-0075  View
469021 43011 CVE-2010-0427 DEBIAN:DSA-2006  View
469022 43011 CVE-2010-0427 URL:http://www.debian.org/security/2010/dsa-2006  View
469023 43011 CVE-2010-0427 GENTOO:GLSA-201003-01  View
469024 43011 CVE-2010-0427 URL:http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml  View
469025 43011 CVE-2010-0427 SUSE:SUSE-SR:2010:006  View
469026 43011 CVE-2010-0427 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html  View
469027 43011 CVE-2010-0427 UBUNTU:USN-905-1  View
469028 43011 CVE-2010-0427 URL:http://www.ubuntu.com/usn/USN-905-1  View
469029 43011 CVE-2010-0427 OVAL:oval:org.mitre.oval:def:10946  View
469030 43011 CVE-2010-0427 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10946  View
469031 43011 CVE-2010-0427 OVAL:oval:org.mitre.oval:def:7216  View
469032 43011 CVE-2010-0427 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7216  View
469033 43011 CVE-2010-0427 SECTRACK:1023658  View
469034 43011 CVE-2010-0427 URL:http://securitytracker.com/id?1023658  View
469035 43011 CVE-2010-0427 SECUNIA:38915  View
469036 43011 CVE-2010-0427 URL:http://secunia.com/advisories/38915  View
469037 43011 CVE-2010-0427 SECUNIA:38795  View
469038 43011 CVE-2010-0427 URL:http://secunia.com/advisories/38795  View
469039 43011 CVE-2010-0427 SECUNIA:38803  View
469040 43011 CVE-2010-0427 URL:http://secunia.com/advisories/38803  View
469041 43011 CVE-2010-0427 SECUNIA:38762  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36183 JVNDB-2010-001963 QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 QEMU-KVM は、ゲスト QXL ドライバポインタを適切に検証しないため、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2010-0431 43011 6.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001963.html  View