CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
10.1%
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been discovered in sudo:
A local attacker with privileges to use βsudoeditβ or the privilege to execute commands with the βrunas_defaultβ setting enabled could leverage these vulnerabilities to execute arbitrary code with elevated privileges.
CVE-2010-0426: Revoke all βsudoeditβ privileges, or use the full path to sudoedit. CVE-2010-0427: Remove all occurrences of the βrunas_defaultβ setting.
All sudo users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/sudo-1.7.2_p4"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | app-admin/sudo | <Β 1.7.2_p4 | UNKNOWN |