Vulnerability Report

CVE-2010-1646

Title: Todd Miller Sudo Auth Bypass

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2010-1646.

CWE Category CWE-264

Published Date Jun 07, 2010

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 6.2 CVSS v2.0

Exploit Probability (EPSS)

0.46%

Vulnerability Summary

CVE-2010-1646: The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

Impacted Vendors

todd_miller 1

gratisoft 1

Reference Links

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042838.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043026.html http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://secunia.com/advisories/40002 http://secunia.com/advisories/40188 http://secunia.com/advisories/40215 http://secunia.com/advisories/40508 http://secunia.com/advisories/43068 http://security.gentoo.org/glsa/glsa-201009-03.xml http://wiki.rpath.com/Advisories:rPSA-2010-0075 http://www.debian.org/security/2010/dsa-2062 http://www.mandriva.com/security/advisories?name=MDVSA-2010:118 http://www.osvdb.org/65083 http://www.redhat.com/support/errata/RHSA-2010-0475.html http://www.securityfocus.com/archive/1/514489/100/0/threaded http://www.securityfocus.com/bid/40538 http://www.securitytracker.com/id?1024101 http://www.sudo.ws/repos/sudo/rev/3057fde43cf0 http://www.sudo.ws/repos/sudo/rev/a09c6812eaec http://www.sudo.ws/sudo/alerts/secure_path.html http://www.vupen.com/english/advisories/2010/1452 http://www.vupen.com/english/advisories/2010/1478 http://www.vupen.com/english/advisories/2010/1518 http://www.vupen.com/english/advisories/2010/1519 http://www.vupen.com/english/advisories/2011/0212 https://bugzilla.redhat.com/show_bug.cgi?id=598154 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10580 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7338 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042838.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043026.html http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://secunia.com/advisories/40002 http://secunia.com/advisories/40188 http://secunia.com/advisories/40215 http://secunia.com/advisories/40508 http://secunia.com/advisories/43068 http://security.gentoo.org/glsa/glsa-201009-03.xml http://wiki.rpath.com/Advisories:rPSA-2010-0075 http://www.debian.org/security/2010/dsa-2062 http://www.mandriva.com/security/advisories?name=MDVSA-2010:118 http://www.osvdb.org/65083 http://www.redhat.com/support/errata/RHSA-2010-0475.html http://www.securityfocus.com/archive/1/514489/100/0/threaded http://www.securityfocus.com/bid/40538 http://www.securitytracker.com/id?1024101 http://www.sudo.ws/repos/sudo/rev/3057fde43cf0 http://www.sudo.ws/repos/sudo/rev/a09c6812eaec http://www.sudo.ws/sudo/alerts/secure_path.html http://www.vupen.com/english/advisories/2010/1452 http://www.vupen.com/english/advisories/2010/1478 http://www.vupen.com/english/advisories/2010/1518 http://www.vupen.com/english/advisories/2010/1519 http://www.vupen.com/english/advisories/2011/0212 https://bugzilla.redhat.com/show_bug.cgi?id=598154 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10580 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7338

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.2

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:H/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns