Lucene search
RootSSV:19206HistoryMar 02, 2010 - 12:00 a.m.
Todd Miller Sudo 'runas_default'本地特权提升漏洞
2010-03-0200:00:00
Root
www.seebug.org
25
EPSS
0
Percentile
10.1%
Bugraq ID: 38432
CVE ID：CVE-2010-0427
Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。
当使用"runas_default"选项时，sudo不正确重设组权限。如果本地非特权用户由sudoers文件授权在默认用户帐户下执行sudo命令，可导致特权提升。
Todd Miller Sudo 1.6.9 p19
Todd Miller Sudo 1.6.9 p18
Todd Miller Sudo 1.6.9 p17
Todd Miller Sudo 1.6.9 p21已经修复此漏洞，建议用户下载使用：
ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.tar.gz
Related
openvas
openvas
Mandriva Update for sudo MDVSA-2010:052 (sudo)
2010-03-12 00:00:00
Mandriva Update for sudo MDVSA-2010:052 (sudo)
2010-03-12 00:00:00
Mandriva Update for microcode_ctl MDVA-2010:052 (microcode_ctl)
2010-02-15 00:00:00
cvelist
cvelist
CVE-2010-0427
2010-02-25 19:00:00
cve
cve
CVE-2010-0427
2010-02-25 19:30:00
nessus
nessus
Mandriva Linux Security Advisory : sudo (MDVSA-2010:052)
2010-03-02 00:00:00
openSUSE Security Update : sudo (sudo-2083)
2010-03-09 00:00:00
RHEL 5 : sudo (RHSA-2010:0122)
2010-03-01 00:00:00
ubuntucve
ubuntucve
CVE-2010-0427
2010-02-23 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:42:19
prion
prion
Command injection
2010-02-25 19:30:00
nvd
nvd
CVE-2010-0427
2010-02-25 19:30:00
debiancve
debiancve
CVE-2010-0427
2010-02-25 19:30:00
debian
debian
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
2010-03-02 20:36:52
centos
centos
sudo security update
2010-03-01 18:44:36
gentoo
gentoo
sudo: Privilege escalation
2010-03-03 00:00:00
redhat
redhat
(RHSA-2010:0122) Important: sudo security update
2010-02-26 00:00:00
(RHSA-2010:0172) Important: rhev-hypervisor security and bug fix update
2010-03-24 00:00:00
osv
osv
sudo - several vulnerabilities
2010-03-02 00:00:00
oraclelinux
oraclelinux
sudo security update
2010-02-26 00:00:00
ubuntu
ubuntu
sudo vulnerabilities
2010-02-26 00:00:00
vmware
vmware
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00