Description
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.
Published: 2010-02-25
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2006-1 New sudo packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0458 sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.
Ubuntu USN Ubuntu USN USN-905-1 sudo vulnerabilities
History

No history.

Subscriptions

Redhat Enterprise Linux
Todd Miller Sudo
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T00:45:12.240Z

Reserved: 2010-01-27T00:00:00.000Z

Link: CVE-2010-0427

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-02-25T19:30:00.517

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-0427

cve-icon Redhat

Severity : Important

Publid Date: 2009-04-27T00:00:00Z

Links: CVE-2010-0427 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses