CVE-2010-1646

sudo: insufficient environment sanitization issue

Severity Score

6.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

La funcionalidad de ruta de acceso segura en env.c en sudo v1.3.1 a v1.6.9p22 y v1.7.0 a v1.7.2p6 no controla correctamente un entorno que contenga múltiples variables PATH, lo que podría permitir a usuarios locales conseguir privilegios a través de un valor debidamente modificado de la última variable de entorno PATH.

*Credits: N/A

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Local

Attack Complexity

Medium

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-04-29 CVE Reserved
2010-06-07 CVE Published
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (30)

URL	Tag	Source
http://secunia.com/advisories/40188	Third Party Advisory
http://secunia.com/advisories/40215	Third Party Advisory
http://secunia.com/advisories/40508	Third Party Advisory
http://secunia.com/advisories/43068	Third Party Advisory
http://wiki.rpath.com/Advisories:rPSA-2010-0075	X_refsource_confirm
http://www.osvdb.org/65083	Vdb Entry
http://www.securityfocus.com/archive/1/514489/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/40538	Vdb Entry
http://www.securitytracker.com/id?1024101	Vdb Entry
http://www.vupen.com/english/advisories/2010/1452	Vdb Entry
http://www.vupen.com/english/advisories/2010/1478	Vdb Entry
http://www.vupen.com/english/advisories/2010/1518	Vdb Entry
http://www.vupen.com/english/advisories/2010/1519	Vdb Entry
http://www.vupen.com/english/advisories/2011/0212	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10580	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7338	Signature

URL	Date	SRC
http://www.sudo.ws/repos/sudo/rev/3057fde43cf0	2024-08-07
http://www.sudo.ws/repos/sudo/rev/a09c6812eaec	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042838.html	2018-10-10
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html	2018-10-10
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043026.html	2018-10-10
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	2018-10-10
http://secunia.com/advisories/40002	2018-10-10
http://security.gentoo.org/glsa/glsa-201009-03.xml	2018-10-10
http://www.debian.org/security/2010/dsa-2062	2018-10-10
http://www.mandriva.com/security/advisories?name=MDVSA-2010:118	2018-10-10
http://www.redhat.com/support/errata/RHSA-2010-0475.html	2018-10-10
http://www.sudo.ws/sudo/alerts/secure_path.html	2018-10-10
https://bugzilla.redhat.com/show_bug.cgi?id=598154	2010-06-16
https://access.redhat.com/security/cve/CVE-2010-1646	2010-06-16

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.3.1 Search vendor "Todd Miller" for product "Sudo" and version "1.3.1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6 Search vendor "Todd Miller" for product "Sudo" and version "1.6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.2p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.2p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.2p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.2p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.2p3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.2p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p4 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p5 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p6 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.3p7 Search vendor "Todd Miller" for product "Sudo" and version "1.6.3p7"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.4 Search vendor "Todd Miller" for product "Sudo" and version "1.6.4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.4p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.4p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.4p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.4p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.5 Search vendor "Todd Miller" for product "Sudo" and version "1.6.5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.5p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.5p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.5p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.5p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.6 Search vendor "Todd Miller" for product "Sudo" and version "1.6.6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7p3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7p4 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7p4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.7p5 Search vendor "Todd Miller" for product "Sudo" and version "1.6.7p5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p4 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p5 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p6 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p7 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p7"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p8 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p8"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p9 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p9"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p10 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p10"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p11 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p11"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.8p12 Search vendor "Todd Miller" for product "Sudo" and version "1.6.8p12"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p1 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p2 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p3 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p4 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p5 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p6 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p7 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p7"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p8 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p8"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p9 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p9"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p10 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p10"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p11 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p11"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p12 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p12"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p13 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p13"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p14 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p14"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p15 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p15"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p16 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p16"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p17 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p17"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p18 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p18"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p19 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p19"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p20 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p20"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p21 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p21"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.6.9p22 Search vendor "Todd Miller" for product "Sudo" and version "1.6.9p22"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.0 Search vendor "Todd Miller" for product "Sudo" and version "1.7.0"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.1 Search vendor "Todd Miller" for product "Sudo" and version "1.7.1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p1 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p1"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p2 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p2"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p3 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p3"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p4 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p4"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p5 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p5"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p6 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p6"		-		Affected
Todd Miller Search vendor "Todd Miller"		Sudo Search vendor "Todd Miller" for product "Sudo"				1.7.2p7 Search vendor "Todd Miller" for product "Sudo" and version "1.7.2p7"		-		Affected