PT-2013-3921 · Todd Miller+4 · Sudo+4

Vincent Danen · Published 2013-04-08 · Updated 2017-08-29 · CVE-2013-2776

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sudo versions 1.3.5 through 1.7.10p5 sudo versions 1.8.0 through 1.8.6p6

Description The issue allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal, when running on systems without /proc or the sysctl function with the tty tickets option enabled.

Recommendations For sudo versions 1.3.5 through 1.7.10p5, update to a version outside of this range to resolve the issue. For sudo versions 1.8.0 through 1.8.6p6, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the tty tickets option until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2017-1056

CESA-2013_1701

CVE-2013-2776

DSA-2642-1

RHSA-2013:1353

RHSA-2013:1701

RHSA-2013_1353

RHSA-2013_1701

Affected Products

Alt Linux

Centos

Red Hat

Suse

Sudo

References · 75

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudo_password_bypass.rb · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2015-5602 · Exploit
• 🔥 https://github.com/t0kx/privesc-CVE-2010-0426 · Exploit
• https://bdu.fstec.ru/vul/2015-08594 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-1056 · Vendor Advisory
• https://support.apple.com/kb/HT205031 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09416 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3149 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2776 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-1701.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163 · Security Note
• https://bdu.fstec.ru/vul/2015-06936 · Security Note
• https://bdu.fstec.ru/vul/2015-09414 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0151 · Security Note