PT-2010-1032 · Todd Miller+2 · Sudo+2

Anders Kaseorg + 1 · Published 2010-06-07 · Updated 2024-06-15 · CVE-2010-1646

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions sudo versions 1.3.1 through 1.6.9p22 sudo versions 1.7.0 through 1.7.2p6

Description The issue is related to the secure path feature in sudo, which does not properly handle an environment containing multiple PATH variables. This could allow local users to gain privileges via a crafted value of the last PATH variable. Multiple vulnerabilities in the sudo package may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker.

Recommendations For sudo versions 1.3.1 through 1.6.9p22, update to a version newer than 1.6.9p22 to resolve the issue. For sudo versions 1.7.0 through 1.7.2p6, update to a version newer than 1.7.2p6 to resolve the issue. As a temporary workaround, consider restricting access to the sudo functionality until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2017-1056

BDU:2015-03065

BDU:2015-09416

CVE-2010-1646

DSA-2062-1

OPENSUSE-SU-2024:10551-1

RHSA-2010:0475

RHSA-2010_0475

Affected Products

Alt Linux

Red Hat

Sudo

References · 83

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudo_password_bypass.rb · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2015-5602 · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2010-0426 · Exploit
• 🔥 http://sudo.ws/repos/sudo/rev/3057fde43cf0 · Exploit
• 🔥 http://sudo.ws/repos/sudo/rev/a09c6812eaec · Exploit
• https://bdu.fstec.ru/vul/2015-08594 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-1056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1646 · Security Note
• https://bdu.fstec.ru/vul/2015-09416 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3149 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-1646 · Vendor Advisory
• http://sudo.ws/sudo/alerts/secure_path.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2776 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:118 · Vendor Advisory