NVD

Id
7147  
Name
CVE-2011-0008  
Description
A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-01-20  
Modified Date
2011-02-04  
Seq
2011-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39975 7147 CVE-2011-0008 FEDORA-2011-0470  View
39976 7147 CVE-2011-0008 FEDORA-2011-0455  View
39977 7147 CVE-2011-0008 MDVSA-2011:018  View
39978 7147 CVE-2011-0008 ADV-2011-0195  View
39979 7147 CVE-2011-0008 ADV-2011-0199  View
39980 7147 CVE-2011-0008 sudo-parse-privilege-escalation(64965)  View
39981 7147 CVE-2011-0008 https://bugzilla.redhat.com/show_bug.cgi?id=668843  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33799 JVNDB-2011-004041 Fedora の sudo の parse.c における root 権限を取得される脆弱性 Fedora の sudo の parse.c は、システムグループに属するユーザの認証を判定する際に、sudoers ファイル内の当該グループを適切に解釈しないため、sudoers される、および root 権限を取得される脆弱性が存在します。 CVE-2011-0008 47915 CVE-2011-0008 7147 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004041.html 2011-01-18 2012-03-27 View