Lucene search

K
prionPRIOn knowledge basePRION:CVE-2011-0008
HistoryJan 20, 2011 - 7:00 p.m.

Authorization

2011-01-2019:00:00
PRIOn knowledge base
www.prio-n.com
10

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

40.7%

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.