Unscored severity · published Jun 7, 2010
CVE-2010-1646
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Sudo · Todd Miller
1.3.1; 1.6; 1.6.1; 1.6.2; 1.6.2p1; 1.6.2p2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1646
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1646
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042838.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043026.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Vendor Advisory
http://secunia.com/advisories/40002
secunia.com
http://secunia.com/advisories/40188
More from Sudo
8.4
CVE-2005-1831
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting…
7.0
CVE-2016-7032
sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen…
–
CVE-2014-0106
Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions…
–
CVE-2013-2777
sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with…
–
CVE-2013-2776
sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate…