CVE-2013-2776

CWE-2648 documents8 sources
Severity
4.4MEDIUM
EPSS
0.1%
top 77.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XTodd Miller Sudo
Timeline
PublishedApr 8
Latest updateMay 17

Description

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally…

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages3 packages

▶Debiansudo< 1.8.5p2-1+nmu1+3
▶NVDtodd_miller/sudo64 versions+63
▶NVDapple/mac_os_x10.10.4

🔴Vulnerability Details

3
GHSA
GHSA-crcj-xh9h-7wr8: sudo 1↗2022-05-17
▶
CVEList
CVE-2013-2776: sudo 1↗2013-04-08
▶
OSV
CVE-2013-2776: sudo 1↗2013-04-08
▶

📋Vendor Advisories

3
Red Hat
sudo: bypass of tty_tickets constraints↗2013-02-27
▶
Debian
CVE-2013-2776: sudo - sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems w...↗2013
▶
Apple
CVE-2013-2776: OS X Yosemite v10.10.5 and Security Update 2015-006↗
▶

💬Community

1
Bugzilla
CVE-2013-2776 sudo: bypass of tty_tickets constraints↗2013-04-08
▶
CVE-2013-2776 (MEDIUM CVSS 4.4) | sudo 1.3.5 through 1.7.10p5 and 1.8 | cvebase.io