PT-2009-1078 · Sudo+1 · Sudo+1

Published 2009-01-30 · Updated 2024-01-12 · CVE-2009-0034

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sudo versions 1.6.9p17 through 1.6.9p19

Description The issue concerns the improper interpretation of a system group in the sudoers file during authorization decisions for users belonging to that group. This allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. The vulnerability can be exploited locally and may lead to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For sudo versions 1.6.9p17 through 1.6.9p19, update to version 1.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the sudo command for users who belong to system groups until a patch is applied. Additionally, review and restrict the sudoers file to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2015-09373

CVE-2009-0034

RHSA-2009:0267

RHSA-2009_0267

Affected Products

Red Hat

Sudo

References · 30

• https://osv.dev/vulnerability/CVE-2009-0034 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09373 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0034 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:033 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0267.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0034 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0034 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2009-0009.html · Note
• http://securityfocus.com/bid/33517 · Note
• http://vupen.com/english/advisories/2009/1865 · Note
• http://lists.vmware.com/pipermail/security-announce/2009/000060.html · Note
• http://secunia.com/advisories/33885 · Note
• https://t.me/cvenotify/67312 · Telegram Post
• http://secunia.com/advisories/33840 · Note
• http://securitytracker.com/id?1021688 · Note