NVD

Id
13165  
Name
CVE-2010-1646  
Description
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-06-07  
Modified Date
2011-07-18  
Seq
2010-1646  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72758 13165 CVE-2010-1646 FEDORA-2010-9402  View
72759 13165 CVE-2010-1646 FEDORA-2010-9417  View
72760 13165 CVE-2010-1646 FEDORA-2010-9415  View
72761 13165 CVE-2010-1646 SUSE-SR:2011:002  View
72762 13165 CVE-2010-1646 oval:org.mitre.oval:def:10580  View
72763 13165 CVE-2010-1646 oval:org.mitre.oval:def:7338  View
72764 13165 CVE-2010-1646 GLSA-201009-03  View
72765 13165 CVE-2010-1646 http://wiki.rpath.com/Advisories:rPSA-2010-0075  View
72766 13165 CVE-2010-1646 DSA-2062  View
72767 13165 CVE-2010-1646 MDVSA-2010:118  View
72768 13165 CVE-2010-1646 RHSA-2010:0475  View
72769 13165 CVE-2010-1646 20101027 rPSA-2010-0075-1 sudo  View
72770 13165 CVE-2010-1646 40538  View
72771 13165 CVE-2010-1646 1024101  View
72772 13165 CVE-2010-1646 http://www.sudo.ws/repos/sudo/rev/3057fde43cf0  View
72773 13165 CVE-2010-1646 http://www.sudo.ws/repos/sudo/rev/a09c6812eaec  View
72774 13165 CVE-2010-1646 http://www.sudo.ws/sudo/alerts/secure_path.html  View
72775 13165 CVE-2010-1646 ADV-2010-1452  View
72776 13165 CVE-2010-1646 ADV-2010-1478  View
72777 13165 CVE-2010-1646 ADV-2010-1518  View
72778 13165 CVE-2010-1646 ADV-2010-1519  View
72779 13165 CVE-2010-1646 ADV-2011-0212  View
72780 13165 CVE-2010-1646 https://bugzilla.redhat.com/show_bug.cgi?id=598154  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35883 JVNDB-2010-001663 sudo の secure path 機能における権限昇格の脆弱性 sudo の env.c の secure path 機能には、環境変数 PATH を適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2010-1646 44226 CVE-2010-1646 13165 6.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001663.html 2010-06-07 2010-09-08 View