CVE-2005-1993
published 2005-06-20CVE-2005-1993: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges…
PriorityP413low3.7CVSS 2.0
AVLACHAuNCPIPAP
EPSS
0.40%
32.3th percentile
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| crypto-js_project | crypto-js | >= 0 < 4.2.0 | 4.2.0 |
| debian | sudo | < sudo 1.6.8p9-1 (bookworm) | sudo 1.6.8p9-1 (bookworm) |
| entronad | crypto-es | >= 0 < 2.1.0 | 2.1.0 |
| sudo_project | sudo | >= 0 < 1.6.8p9-1 | 1.6.8p9-1 |
| sudo_project | sudo | >= 0 < 1.6.8p9-1 | 1.6.8p9-1 |
| sudo_project | sudo | >= 0 < 1.6.8p9-1 | 1.6.8p9-1 |
| sudo_project | sudo | >= 0 < 1.6.8p9-1 | 1.6.8p9-1 |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
| todd_miller | sudo | — | — |
CVSS provenance
nvdv2.03.7LOWAV:L/AC:H/Au:N/C:P/I:P/A:P
osv3.7LOW
vendor_redhat9.1CRITICAL
vendor_debian3.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
ghsa·2023-10-25
CVE-2023-46133 [CRITICAL] CWE-327 crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
### Impact
#### Summary
Crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and [at least 1,300,000 times weaker than current industry standard][OWASP PBKDF2 Cheatsheet]. This is because it both (1) defaults to [SHA1][SHA1 wiki], a cryptographic hash algorithm considered insecure [since at least 2005][Cryptanalysis of SHA-1] and (2) defaults to [one single iteration][one iteration src], a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to [preimage][preimage attack] and [collision][collision attack] attacks. Remediation of this issue might be very difficult, as the changes required to f
GHSA
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
ghsa·2023-10-25
CVE-2023-46233 [CRITICAL] CWE-327 crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
### Impact
#### Summary
Crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and [at least 1,300,000 times weaker than current industry standard][OWASP PBKDF2 Cheatsheet]. This is because it both (1) defaults to [SHA1][SHA1 wiki], a cryptographic hash algorithm considered insecure [since at least 2005][Cryptanalysis of SHA-1] and (2) defaults to [one single iteration][one iteration src], a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to [preimage][preimage attack] and [collision][collision attack] attacks.
Potential Impact:
1. If used to protect passwords, the impact is high.
2. If
GHSA
GHSA-8q3v-p32x-2pq7: Race condition in sudo 1
ghsa_unreviewed·2022-05-01
CVE-2005-1993 [LOW] GHSA-8q3v-p32x-2pq7: Race condition in sudo 1
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
OSV
CVE-2005-1993: Race condition in sudo 1
osv·2005-06-20·CVSS 3.7
CVE-2005-1993 [LOW] CVE-2005-1993: Race condition in sudo 1
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Red Hat
crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
vendor_redhat·2023-10-25·CVSS 9.1
CVE-2023-46233 [CRITICAL] CWE-328 crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic hash algorithm considered insecure since at least 2005, and defaults to one single iteration, a 'strength' or 'difficulty' value specified at 1,000 when specified in 1993. PBKDF2 relies on iteration count as a countermeasure to preimage and collision attacks. If used to protect passwords, the impact is high. If used to generate signatures, the impact is high. Version 4.2.0 contains a patch for this issue. As a wo
Ubuntu
sudo vulnerability
vendor_ubuntu·2005-06-21
CVE-2005-1993 sudo vulnerability
Title: sudo vulnerability
Summary: sudo vulnerability
Charles Morris discovered a race condition in sudo which could lead to
privilege escalation. If /etc/sudoers allowed a user the execution of
selected programs, and this was followed by another line containing
the pseudo-command "ALL", that user could execute arbitrary commands
with sudo by creating symbolic links at a certain time.
Please note that this does not affect a standard Ubuntu installation.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
security flaw
vendor_redhat·2005-06-20·CVSS 3.7
CVE-2005-1993 [LOW] security flaw
security flaw
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Debian
CVE-2005-1993: sudo - Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used ...
vendor_debian·2005·CVSS 3.7
CVE-2005-1993 [LOW] CVE-2005-1993: sudo - Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used ...
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Scope: local
bookworm: resolved (fixed in 1.6.8p9-1)
bullseye: resolved (fixed in 1.6.8p9-1)
forky: resolved (fixed in 1.6.8p9-1)
sid: resolved (fixed in 1.6.8p9-1)
trixie: resolved (fixed in 1.6.8p9-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2005-1993 security flaw
bugzilla·2018-08-16·CVSS 3.7
CVE-2005-1993 [LOW] CVE-2005-1993 security flaw
CVE-2005-1993 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Bugzilla
CAN-2004-1051, CAN-2004-1689, CAN-2005-1119, CAN-2005-1831, CAN-2005-1993 sudo issues
bugzilla·2005-07-08·CVSS 2.1
[LOW] CAN-2004-1051, CAN-2004-1689, CAN-2005-1119, CAN-2005-1831, CAN-2005-1993 sudo issues
CAN-2004-1051, CAN-2004-1689, CAN-2005-1119, CAN-2005-1831, CAN-2005-1993 sudo issues
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050513 Fedora/1.0.4-1.3.1 Firefox/1.0.4
Description of problem:
http://www.courtesan.com/sudo/alerts/path_race.html describes a problem with sudo that as far as I know hasn't been fixed in fedora legacy.
Version-Release number of selected component (if applicable):
How reproducible:
Didn't try
Additional info:
Discussion:
CAN-2004-1689 sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with
root privileges, which allows local users to read arbitrary files via a symlink
attack on the temporary file before quitting sudoedit.
CAN-2005-1119 Sudo VISudo 1.6.8 and earlier allows local users to corrupt
http://docs.info.apple.com/article.html?artnum=302847http://secunia.com/advisories/15744http://secunia.com/advisories/17813http://www.debian.org/security/2005/dsa-735http://www.novell.com/linux/security/advisories/2005_36_sudo.htmlhttp://www.osvdb.org/17396http://www.redhat.com/support/errata/RHSA-2005-535.htmlhttp://www.securityfocus.com/archive/1/402741http://www.securityfocus.com/archive/1/425974/100/0/threadedhttp://www.securityfocus.com/bid/13993http://www.securityfocus.com/bid/15647http://www.sudo.ws/sudo/alerts/path_race.htmlhttp://www.vupen.com/english/advisories/2005/0821http://www.vupen.com/english/advisories/2005/2659https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116https://exchange.xforce.ibmcloud.com/vulnerabilities/21080https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242http://docs.info.apple.com/article.html?artnum=302847http://secunia.com/advisories/15744http://secunia.com/advisories/17813http://www.debian.org/security/2005/dsa-735http://www.novell.com/linux/security/advisories/2005_36_sudo.htmlhttp://www.osvdb.org/17396http://www.redhat.com/support/errata/RHSA-2005-535.htmlhttp://www.securityfocus.com/archive/1/402741http://www.securityfocus.com/archive/1/425974/100/0/threadedhttp://www.securityfocus.com/bid/13993http://www.securityfocus.com/bid/15647http://www.sudo.ws/sudo/alerts/path_race.htmlhttp://www.vupen.com/english/advisories/2005/0821http://www.vupen.com/english/advisories/2005/2659https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116https://exchange.xforce.ibmcloud.com/vulnerabilities/21080https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242
2005-06-20
Published