Описание
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | not-affected | |
| devel | released | 1.6.9p17-1ubuntu3 |
| gutsy | not-affected | |
| hardy | released | 1.6.9p10-1ubuntu3.4 |
| intrepid | released | 1.6.9p17-1ubuntu2.1 |
| upstream | needs-triage |
Показывать по
EPSS
6.9 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret ...
parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.
EPSS
6.9 Medium
CVSS2
7.8 High
CVSS3