cbcvebase.
CVE-2010-0427
published 2010-02-25

CVE-2010-0427: sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a…

medium4.4CVSS 3.1
AVLACMAuNCPIPAP
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

Affected

33 ranges· showing 25
VendorProductVersion rangeFixed in
debiansudo< sudo 1.7.0-1 (bookworm)sudo 1.7.0-1 (bookworm)
sudo_projectsudo>= 0 < 1.7.0-11.7.0-1
sudo_projectsudo>= 0 < 1.7.0-11.7.0-1
sudo_projectsudo>= 0 < 1.7.0-11.7.0-1
sudo_projectsudo>= 0 < 1.7.0-11.7.0-1
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo

CVSS provenance

nvd4.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv4.4MEDIUM