Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-1646HistoryJun 07, 2010 - 5:12 p.m.
CVE-2010-1646
2010-06-0717:12:48
Debian Security Bug Tracker
security-tracker.debian.org
26
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
10.1%
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 11 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 999 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
| Debian | 13 | all | sudo | < 1.7.2p7-1 | sudo_1.7.2p7-1_all.deb |
Related
openvas
openvas
CentOS Update for sudo CESA-2010:0475 centos5 i386
2011-08-09 00:00:00
Fedora Update for sudo FEDORA-2010-9417
2010-06-25 00:00:00
Mandriva Update for sudo MDVSA-2010:118 (sudo)
2010-06-18 00:00:00
prion
prion
Path traversal
2010-06-07 17:12:00
oraclelinux
oraclelinux
sudo security update
2010-06-16 00:00:00
debian
debian
fedora
fedora
[SECURITY] Fedora 11 Update: sudo-1.7.2p6-2.fc11
2010-06-21 12:57:22
[SECURITY] Fedora 12 Update: sudo-1.7.2p6-2.fc12
2010-06-21 12:59:39
[SECURITY] Fedora 13 Update: sudo-1.7.2p6-2.fc13
2010-06-14 17:29:15
centos
centos
sudo security update
2010-06-16 12:03:33
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2010-0475)
2013-07-12 00:00:00
freebsd
freebsd
sudo -- Secure path vulnerability
2010-06-02 00:00:00
osv
osv
sudo - environment sanitization bypass
2010-06-17 00:00:00
sudo-1.8.18p1-1.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
sudo vulnerability
2010-06-30 00:00:00
nvd
nvd
CVE-2010-1646
2010-06-07 17:12:48
cve
cve
CVE-2010-1646
2010-06-07 17:12:48
securityvulns
securityvulns
[ MDVSA-2010:118 ] sudo
2010-06-20 00:00:00
Sudo protection bypass
2010-06-20 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:31
ubuntucve
ubuntucve
CVE-2010-1646
2010-06-07 00:00:00
cvelist
cvelist
CVE-2010-1646
2010-06-07 14:00:00
redhat
redhat
(RHSA-2010:0475) Moderate: sudo security update
2010-06-15 00:00:00
gentoo
gentoo
sudo: Privilege Escalation
2010-09-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8
2010-06-01 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
10.1%
Related for DEBIANCVE:CVE-2010-1646