PT-2001-2372 · Engarde · Engarde Secure Linux

Published 2001-07-11 · Updated 2008-09-05 · CVE-2001-1240

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Engarde Secure Linux version 1.0.1

Description The default configuration of sudo in Engarde Secure Linux allows any user in the admin group to run certain commands that could be leveraged to gain full root access.

Recommendations For Engarde Secure Linux version 1.0.1, consider restricting the privileges of the admin group to prevent unauthorized access to sensitive commands until a proper configuration or patch is available. As a temporary workaround, review and modify the sudo configuration to limit the commands that can be executed by the admin group.

Fix

Related Identifiers

CVE-2001-1240

Affected Products

Engarde Secure Linux

References · 2

• http://linuxsecurity.com/advisories/other_advisory-1493.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1240 · Security Note