NVD

Id
37926  
Name
CVE-2013-1776  
Description
sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-08  
Modified Date
2016-09-08  
Seq
2013-1776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193580 37926 CVE-2013-1776 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839  View
193581 37926 CVE-2013-1776 APPLE-SA-2015-08-13-2  View
193582 37926 CVE-2013-1776 openSUSE-SU-2013:0495  View
193583 37926 CVE-2013-1776 RHSA-2013:1353  View
193584 37926 CVE-2013-1776 DSA-2642  View
193585 37926 CVE-2013-1776 [oss-security] 20130227 Re: CVE request: potential bypass of sudo tty_tickets constraints  View
193586 37926 CVE-2013-1776 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
193587 37926 CVE-2013-1776 58207  View
193588 37926 CVE-2013-1776 SSA:2013-065-01  View
193589 37926 CVE-2013-1776 http://www.sudo.ws/repos/sudo/rev/632f8e028191  View
193590 37926 CVE-2013-1776 http://www.sudo.ws/repos/sudo/rev/6b22be4d09f0  View
193591 37926 CVE-2013-1776 http://www.sudo.ws/sudo/alerts/tty_tickets.html  View
193592 37926 CVE-2013-1776 sudo-ttytickets-sec-bypass(82453)  View
193593 37926 CVE-2013-1776 https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/87023  View
193594 37926 CVE-2013-1776 https://bugzilla.redhat.com/show_bug.cgi?id=916365  View
193595 37926 CVE-2013-1776 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20592 JVNDB-2013-002167 sudo における認証をハイジャックされる脆弱性 sudo は、tty_tickets オプションが有効な場合、制御ターミナルデバイス (controlling terminal device) を適切に検証しないため、他のターミナルの認証をハイジャックされる脆弱性が存在します。 CVE-2013-1776 61718 CVE-2013-1776 37926 4.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002167.html 2013-02-27 2015-08-31 View