NVD

Id
37925  
Name
CVE-2013-1775  
Description
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-05  
Modified Date
2016-11-28  
Seq
2013-1775  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193564 37925 CVE-2013-1775 APPLE-SA-2013-09-12-1  View
193565 37925 CVE-2013-1775 APPLE-SA-2015-08-13-2  View
193566 37925 CVE-2013-1775 openSUSE-SU-2013:0495  View
193567 37925 CVE-2013-1775 RHSA-2013:1353  View
193568 37925 CVE-2013-1775 RHSA-2013:1701  View
193569 37925 CVE-2013-1775 http://support.apple.com/kb/HT5880  View
193570 37925 CVE-2013-1775 DSA-2642  View
193571 37925 CVE-2013-1775 [oss-security] 20130227 CVE request: sudo authentication bypass when clock is reset  View
193572 37925 CVE-2013-1775 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
193573 37925 CVE-2013-1775 58203  View
193574 37925 CVE-2013-1775 SSA:2013-065-01  View
193575 37925 CVE-2013-1775 http://www.sudo.ws/repos/sudo/rev/ddf399e3e306  View
193576 37925 CVE-2013-1775 http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f  View
193577 37925 CVE-2013-1775 http://www.sudo.ws/sudo/alerts/epoch_ticket.html  View
193578 37925 CVE-2013-1775 USN-1754-1  View
193579 37925 CVE-2013-1775 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20179 JVNDB-2013-001754 sudo における時刻に関する制限を回避される脆弱性 sudo には、時刻に関する制限を回避され、再認証が要求されないまま権限が保持される脆弱性が存在します。 CVE-2013-1775 61717 CVE-2013-1775 37925 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001754.html 2013-02-27 2015-08-31 View