PT-2010-1083 · Todd Miller+2 · Sudo+2
Agazzini Maurizio
+1
·
Published
2010-04-16
·
Updated
2024-06-15
·
CVE-2010-1163
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
sudo versions 1.6.8 through 1.7.2p5
sudo version 1.7.2 p6 and earlier
Description
The issue concerns a command matching functionality problem in sudo, where a file in the current working directory with the same name as a pseudo-command in the sudoers file can be exploited if the PATH contains an entry for ".". This allows local users to execute arbitrary commands via a Trojan horse executable. For example, this can be demonstrated using
sudoedit. The exploitation of this issue can lead to a breach of confidentiality, integrity, and availability of protected information.Recommendations
For versions 1.6.8 through 1.7.2p5, update to version 1.7.2 p6 or later to resolve the issue.
For version 1.7.2 p6 and earlier, update to a version later than 1.7.2 p6 to mitigate the risk.
As a temporary workaround, consider restricting the use of the
sudoedit function and ensuring that the PATH environment variable does not contain an entry for "." to minimize the risk of exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Red Hat
Sudo