NVD

Id
47383  
Name
CVE-2009-0034  
Description
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-30  
Modified Date
2010-08-21  
Seq
2009-0034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237007 47383 CVE-2009-0034 [Security-announce] 20090710 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl  View
237008 47383 CVE-2009-0034 oval:org.mitre.oval:def:10856  View
237009 47383 CVE-2009-0034 oval:org.mitre.oval:def:6462  View
237010 47383 CVE-2009-0034 http://wiki.rpath.com/Advisories:rPSA-2009-0021  View
237011 47383 CVE-2009-0034 http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327  View
237012 47383 CVE-2009-0034 MDVSA-2009:033  View
237013 47383 CVE-2009-0034 RHSA-2009:0267  View
237014 47383 CVE-2009-0034 20090129 rPSA-2009-0021-1 sudo  View
237015 47383 CVE-2009-0034 20090711 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl  View
237016 47383 CVE-2009-0034 33517  View
237017 47383 CVE-2009-0034 1021688  View
237018 47383 CVE-2009-0034 http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h  View
237019 47383 CVE-2009-0034 http://www.vmware.com/security/advisories/VMSA-2009-0009.html  View
237020 47383 CVE-2009-0034 ADV-2009-1865  View
237021 47383 CVE-2009-0034 https://bugzilla.novell.com/show_bug.cgi?id=468923  View
237022 47383 CVE-2009-0034 https://issues.rpath.com/browse/RPL-2954  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40036 JVNDB-2009-001042 sudo の parse.c における root 権限を取得される脆弱性 sudo の parse.c には、sudoers ファイル内のシステムグループを正しく解釈しないため、root 権限を取得される脆弱性が存在します。 CVE-2009-0034 37465 CVE-2009-0034 47383 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001042.html 2009-01-30 2009-06-22 View