CVSS: 7.2EPSS: 0%CPEs: 19EXPL: 0CVE-2012-2337 – sudo: Multiple netmask values used in Host / Host_List configuration cause any host to be allowed access
https://notcve.org/view.php?id=CVE-2012-2337
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address. sudo v1.6.x y v1.7.x antes de v1.7.9p1, y v1.8.x antes de v1.8.4p5, no admite correctamente las configuraciones que utilizan una sintaxis de la máscara de red, lo que permite a usuarios locales eludir restricciones de comandos en circunstancias oportunistas mediante la ejecución de un comando en un host que tiene una dirección IPv4. • http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081432.html http://secunia.com/advisories/49219 http://secunia.com/advisories/49244 http://secunia.com/advisories/49291 http://secunia.com/advisories/49948 http://www.debian.org/security/2012/dsa-2478 http://www.mandriva.com/security/advisories?name=MDVSA-2012:079 http://www.securitytracker.com/id?1027077 http://www.sudo.ws/sudo/alerts/netmask.html https://bugzilla.redhat.com/show_bug.cgi?id=820677 https:// • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.2EPSS: 0%CPEs: 7EXPL: 4CVE-2012-0809 – sudo 1.8.0 < 1.8.3p1 - Format String
https://notcve.org/view.php?id=CVE-2012-0809
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo. Una vulnerabilidad de formato de cadena en la función sudo_debug en Sudo v1.8.0 a v1.8.3p1 permite a usuarios locales ejecutar código de su elección a través de secuencias de formato de cadena en el nombre del programa ejecutado en sudo. • https://www.exploit-db.com/exploits/18436 https://www.exploit-db.com/exploits/25134 http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0591.html http://archives.neohapsis.com/archives/fulldisclosure/2012-01/att-0591/advisory_sudo.txt http://security.gentoo.org/glsa/glsa-201203-06.xml http://www.sudo.ws/sudo/alerts/sudo_debug.html • CWE-134: Use of Externally-Controlled Format String •
CVSS: 6.9EPSS: 0%CPEs: 115EXPL: 0CVE-2011-0008
https://notcve.org/view.php?id=CVE-2011-0008
A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. Un parche en Fedora para parse.c en sudo anterior a v1.7.4p5-1.fc14 en Fedora 14 no interpreta correctamente un system group (también conocido como el %group) en el fichero sudoers en las decisiones de autorización para un usuario que pertenece a ese grupo, permitiendo a usuarios locales aprovecharse de un fichero sudoers y obtener privilegios de root a través de un comando sudo. NOTA: esta vulnerabilidad existe debido a la vulnerabilidad CVE-2009-0034. • http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html http://secunia.com/advisories/42968 http://www.mandriva.com/security/advisories?name=MDVSA-2011:018 http://www.vupen.com/english/advisories/2011/0195 http://www.vupen.com/english/advisories/2011/0199 https://bugzilla.redhat.com/show_bug.cgi?id=668843 https://exchange.xforce.ibmcloud.com/vulnerabilities/64965 •
CVSS: 4.4EPSS: 0%CPEs: 16EXPL: 0CVE-2011-0010 – sudo: does not ask for password on GID changes
https://notcve.org/view.php?id=CVE-2011-0010
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command. check.c para sudo v1.7.x anterior a v1.7.4p5, cuando un grupo Runas se configura no requiere una contraseña para la ejecución de comandos, lo que implica un cambio gid pero no un cambio de UID, lo que permite a usuarios locales eludir un requisito de autenticación a través de la opción -g del comando sudo. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://openwall.com/lists/oss-security/2011/01/11/3 http://openwall.com/lists/oss-security/2011/01/12/1 http://openwall.com/lists/oss-security/2011/01/12/3 http://secunia.com/advisories&# • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.2EPSS: 0%CPEs: 15EXPL: 0CVE-2010-2956 – sudo: incorrect handling of RunAs specification with both user and group lists
https://notcve.org/view.php?id=CVE-2010-2956
Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence. Sudo v1.7.0 hasta v1.7.4p3, cuando el grupo Runas está configurado, no gestiona de forma adecuada el uso de la opción -u junto a la opción -g, lo que permite a usuarios locales obtener privilegios a través de una línea de comandos que contenga una secuencia "-u root". • http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.html http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html http://secunia.com/advisories/40508 http://secunia.com/advisories/41316 http://secunia.com/advisories/42787 http://security.gentoo.org/glsa/glsa-201009-03.xml http://wiki.rpath.com/Advisories:rPSA-2010-0075 http://www.mandriva.com/security/advisories?name=MDVSA-2010:175 http://www.redhat.com/support/errata/RHSA-2010-0675.html http& •