Mission and Overview
NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).
Resource Status
NVD contains:
CVE Vulnerabilities
56428
Checklists
221
US-CERT Alerts
246
US-CERT Vuln Notes
2721
OVAL Queries
8140
CPE Names
73307

Last updated: Fri May 24 01:24:00 EDT 2013

CVE Publication rate: 12.5

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index

Vulnerability Workload Index: 6.48

About Us
NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

National Cyber Awareness System

Vulnerability Summary for CVE-2010-0427

Original release date:02/25/2010
Last revised:01/21/2011
Source: US-CERT/NIST

Overview

sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

Impact

CVSS Severity (version 2.0):
CVSS v2 Base Score:4.4 (MEDIUM) (AV:L/AC:M/Au:N/C:P/I:P/A:P) (legend)
Impact Subscore: 6.4
Exploitability Subscore: 3.4
CVSS Version 2 Metrics:
Access Vector: Locally exploitable
Access Complexity: Medium
Authentication: Not required to exploit
Impact Type:Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service

Vendor Statements (disclaimer)

Official Statement from Red Hat (03/02/2010)
This issue was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2010-0122.html It did not affect the versions of the sudo packages as shipped with Red Hat Enterprise Linux 3 and 4.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM
Name: ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz
Type: Patch Information
Hyperlink:ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz
External Source: CONFIRM
Name: https://bugzilla.redhat.com/show_bug.cgi?id=567622
Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=567622
External Source: UBUNTU
Name: USN-905-1
Hyperlink:http://www.ubuntu.com/usn/USN-905-1
External Source: CONFIRM
Name: http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8
Hyperlink:http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8
External Source: BUGTRAQ
Name: 20101027 rPSA-2010-0075-1 sudo
Hyperlink:http://www.securityfocus.com/archive/1/archive/1/514489/100/0/threaded
External Source: MLIST
Name: [oss-security] 20100224 Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set
Hyperlink:http://www.openwall.com/lists/oss-security/2010/02/24/5
External Source: MLIST
Name: [oss-security] 20100223 CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set
Hyperlink:http://www.openwall.com/lists/oss-security/2010/02/23/4
External Source: CONFIRM
Name: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349
Hyperlink:http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349
External Source: CONFIRM
Name: http://www.gratisoft.us/bugzilla/attachment.cgi?id=255
Hyperlink:http://www.gratisoft.us/bugzilla/attachment.cgi?id=255
External Source: GENTOO
Name: GLSA-201003-01
Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml
External Source: DEBIAN
Name: DSA-2006
Hyperlink:http://www.debian.org/security/2010/dsa-2006
External Source: CONFIRM
Name: http://wiki.rpath.com/Advisories:rPSA-2010-0075
Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2010-0075
External Source: CONFIRM
Name: http://sudo.ws/repos/sudo/rev/aa0b6c01c462
Hyperlink:http://sudo.ws/repos/sudo/rev/aa0b6c01c462
External Source: SECTRACK
Name: 1023658
Hyperlink:http://securitytracker.com/id?1023658
External Source: SECUNIA
Name: 38915
Hyperlink:http://secunia.com/advisories/38915
External Source: SECUNIA
Name: 38803
Hyperlink:http://secunia.com/advisories/38803
External Source: SECUNIA
Name: 38795
Hyperlink:http://secunia.com/advisories/38795
External Source: SECUNIA
Name: 38762
Hyperlink:http://secunia.com/advisories/38762
External Source: OVAL
Name: oval:org.mitre.oval:def:7216
Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7216
External Source: OVAL
Name: oval:org.mitre.oval:def:10946
Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10946
External Source: SUSE
Name: SUSE-SR:2010:006
Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10946
Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5
Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10946
Identifier:oval:org.mitre.oval:def:7216
Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5
Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7216

Vulnerable software and versions

Nav control imageConfiguration 1
spacerNav control imageOR
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p1
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p2
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p3
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p4
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p5
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p6
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.1
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.2
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.3_p7
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.4_p1
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.4_p2
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.5_p1
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.5_p2
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.6
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.7
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.5
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.7_p5
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8_p1
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8_p12
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8_p5
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8_p8
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.8_p9
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.9_p18
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.9_p17
spacerspacerNav control image* cpe:/a:todd_miller:sudo:1.6.9_p19
* Denotes Vulnerable Software
* Changes related to vulnerability configurations

Technical Details

Vulnerability Type (View All)
  • Permissions, Privileges, and Access Control (CWE-264)
CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0427