PT-2010-1083 · Todd Miller+2 · Sudo+2
Agazzini Maurizio
+1
·
Publicado
2010-04-16
·
Atualizado
2024-06-15
·
CVE-2010-1163
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
sudo versions 1.6.8 through 1.7.2p5
sudo version 1.7.2 p6 and earlier
Description
The issue concerns a command matching functionality problem in sudo, where a file in the current working directory with the same name as a pseudo-command in the sudoers file can be exploited if the PATH contains an entry for ".". This allows local users to execute arbitrary commands via a Trojan horse executable. For example, this can be demonstrated using
sudoedit. The exploitation of this issue can lead to a breach of confidentiality, integrity, and availability of protected information.Recommendations
For versions 1.6.8 through 1.7.2p5, update to version 1.7.2 p6 or later to resolve the issue.
For version 1.7.2 p6 and earlier, update to a version later than 1.7.2 p6 to mitigate the risk.
As a temporary workaround, consider restricting the use of the
sudoedit function and ensuring that the PATH environment variable does not contain an entry for "." to minimize the risk of exploitation.Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Red Hat
Sudo