Lucene search

MitreCVE-2001-1240

HistoryJun 25, 2002 - 4:00 a.m.

CVE-2001-1240

2002-06-2504:00:00

mitre

web.nvd.nist.gov

cve-2001-1240

engarde secure linux

sudo

root access

security breach

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.

Affected configurations

Nvd

Node

engardelinuxsecure_linuxMatch1.0.1

VendorProductVersionCPE
engardelinuxsecure_linux1.0.1cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
engardelinux	secure_linux	1.0.1	cpe:2.3:o:engardelinux:secure_linux:1.0.1:::::::*

References

www.linuxsecurity.com/advisories/other_advisory-1493.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

Related for CVE-2001-1240