CVE-2011-0010
Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Category : Permissions, Privileges, and Access Controls Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Todd_miller>>Sudo >> Version 1.7.0
- Todd_miller>>Sudo >> Version 1.7.0 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.1
- Todd_miller>>Sudo >> Version 1.7.1 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2
- Todd_miller>>Sudo >> Version 1.7.2 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p1
- Todd_miller>>Sudo >> Version 1.7.2p1 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p2
- Todd_miller>>Sudo >> Version 1.7.2p2 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p3
- Todd_miller>>Sudo >> Version 1.7.2p3 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p4
- Todd_miller>>Sudo >> Version 1.7.2p4 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p5
- Todd_miller>>Sudo >> Version 1.7.2p5 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p6
- Todd_miller>>Sudo >> Version 1.7.2p6 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.2p7
- Todd_miller>>Sudo >> Version 1.7.2p7 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.3b1
- Todd_miller>>Sudo >> Version 1.7.3b1 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.4
- Todd_miller>>Sudo >> Version 1.7.4 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.4p1
- Todd_miller>>Sudo >> Version 1.7.4p1 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.4p2
- Todd_miller>>Sudo >> Version 1.7.4p2 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.4p3
- Todd_miller>>Sudo >> Version 1.7.4p3 (Open CPE detail)
Todd_miller>>Sudo >> Version 1.7.4p4
- Todd_miller>>Sudo >> Version 1.7.4p4 (Open CPE detail)
References
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593654
Tags : vendor-advisory, x_refsource_SLACKWARE
Tags : vendor-advisory, x_refsource_SLACKWARE
http://www.mandriva.com/security/advisories?name=MDVSA-2011:018
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : vendor-advisory, x_refsource_MANDRIVA
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
2025©
tesweb SA
