CVE-2010-0427

sudo: Fails to reset group permissions if runas_default set

Published Feb 25, 2010 CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Description
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2006-1 New sudo packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0458 sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.
Ubuntu USN Ubuntu USN USN-905-1 sudo vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:45 AM
Reserved
Jan 27, 2010, 12:00 AM
Status
Modified
Published
Feb 25, 2010, 7:30 PM
Modified
Jun 16, 2026, 11:16 PM
Severity
Important
Public date
Apr 27, 2009, 12:00 AM