NVD

Id
11983  
Name
CVE-2010-0427  
Description
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-02-25  
Modified Date
2011-01-21  
Seq
2010-0427  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66086 11983 CVE-2010-0427 ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz  View
66087 11983 CVE-2010-0427 SUSE-SR:2010:006  View
66088 11983 CVE-2010-0427 oval:org.mitre.oval:def:10946  View
66089 11983 CVE-2010-0427 oval:org.mitre.oval:def:7216  View
66090 11983 CVE-2010-0427 1023658  View
66091 11983 CVE-2010-0427 http://sudo.ws/repos/sudo/rev/aa0b6c01c462  View
66092 11983 CVE-2010-0427 http://wiki.rpath.com/Advisories:rPSA-2010-0075  View
66093 11983 CVE-2010-0427 DSA-2006  View
66094 11983 CVE-2010-0427 GLSA-201003-01  View
66095 11983 CVE-2010-0427 http://www.gratisoft.us/bugzilla/attachment.cgi?id=255  View
66096 11983 CVE-2010-0427 http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349  View
66097 11983 CVE-2010-0427 [oss-security] 20100223 CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set  View
66098 11983 CVE-2010-0427 [oss-security] 20100224 Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set  View
66099 11983 CVE-2010-0427 20101027 rPSA-2010-0075-1 sudo  View
66100 11983 CVE-2010-0427 http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8  View
66101 11983 CVE-2010-0427 USN-905-1  View
66102 11983 CVE-2010-0427 https://bugzilla.redhat.com/show_bug.cgi?id=567622  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35369 JVNDB-2010-001149 sudo における権限昇格の脆弱性 sudo には、runas_default オプションが使用されている場合、グループメンバシップを適切に設定しないため、権限を取得される脆弱性が存在します。 CVE-2010-0427 43007 CVE-2010-0427 11983 4.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001149.html 2010-02-25 2010-09-08 View