6.2

CVE-2010-1646

Exploit

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Todd Miller ≫ Sudo Version1.3.1
Todd Miller ≫ Sudo Version1.6
Todd Miller ≫ Sudo Version1.6.1
Todd Miller ≫ Sudo Version1.6.2
Todd Miller ≫ Sudo Version1.6.2p1
Todd Miller ≫ Sudo Version1.6.2p2
Todd Miller ≫ Sudo Version1.6.2p3
Todd Miller ≫ Sudo Version1.6.3
Todd Miller ≫ Sudo Version1.6.3p1
Todd Miller ≫ Sudo Version1.6.3p2
Todd Miller ≫ Sudo Version1.6.3p3
Todd Miller ≫ Sudo Version1.6.3p4
Todd Miller ≫ Sudo Version1.6.3p5
Todd Miller ≫ Sudo Version1.6.3p6
Todd Miller ≫ Sudo Version1.6.3p7
Todd Miller ≫ Sudo Version1.6.4
Todd Miller ≫ Sudo Version1.6.4p1
Todd Miller ≫ Sudo Version1.6.4p2
Todd Miller ≫ Sudo Version1.6.5
Todd Miller ≫ Sudo Version1.6.5p1
Todd Miller ≫ Sudo Version1.6.5p2
Todd Miller ≫ Sudo Version1.6.6
Todd Miller ≫ Sudo Version1.6.7
Todd Miller ≫ Sudo Version1.6.7p1
Todd Miller ≫ Sudo Version1.6.7p2
Todd Miller ≫ Sudo Version1.6.7p3
Todd Miller ≫ Sudo Version1.6.7p4
Todd Miller ≫ Sudo Version1.6.7p5
Todd Miller ≫ Sudo Version1.6.8
Todd Miller ≫ Sudo Version1.6.8p1
Todd Miller ≫ Sudo Version1.6.8p2
Todd Miller ≫ Sudo Version1.6.8p3
Todd Miller ≫ Sudo Version1.6.8p4
Todd Miller ≫ Sudo Version1.6.8p5
Todd Miller ≫ Sudo Version1.6.8p6
Todd Miller ≫ Sudo Version1.6.8p7
Todd Miller ≫ Sudo Version1.6.8p8
Todd Miller ≫ Sudo Version1.6.8p9
Todd Miller ≫ Sudo Version1.6.8p10
Todd Miller ≫ Sudo Version1.6.8p11
Todd Miller ≫ Sudo Version1.6.8p12
Todd Miller ≫ Sudo Version1.6.9
Todd Miller ≫ Sudo Version1.6.9p1
Todd Miller ≫ Sudo Version1.6.9p2
Todd Miller ≫ Sudo Version1.6.9p3
Todd Miller ≫ Sudo Version1.6.9p4
Todd Miller ≫ Sudo Version1.6.9p5
Todd Miller ≫ Sudo Version1.6.9p6
Todd Miller ≫ Sudo Version1.6.9p7
Todd Miller ≫ Sudo Version1.6.9p8
Todd Miller ≫ Sudo Version1.6.9p9
Todd Miller ≫ Sudo Version1.6.9p10
Todd Miller ≫ Sudo Version1.6.9p11
Todd Miller ≫ Sudo Version1.6.9p12
Todd Miller ≫ Sudo Version1.6.9p13
Todd Miller ≫ Sudo Version1.6.9p14
Todd Miller ≫ Sudo Version1.6.9p15
Todd Miller ≫ Sudo Version1.6.9p16
Todd Miller ≫ Sudo Version1.6.9p17
Todd Miller ≫ Sudo Version1.6.9p18
Todd Miller ≫ Sudo Version1.6.9p19
Todd Miller ≫ Sudo Version1.6.9p20
Todd Miller ≫ Sudo Version1.6.9p21
Todd Miller ≫ Sudo Version1.6.9p22
Todd Miller ≫ Sudo Version1.7.0
Todd Miller ≫ Sudo Version1.7.1
Todd Miller ≫ Sudo Version1.7.2
Todd Miller ≫ Sudo Version1.7.2p1
Todd Miller ≫ Sudo Version1.7.2p2
Todd Miller ≫ Sudo Version1.7.2p3
Todd Miller ≫ Sudo Version1.7.2p4
Todd Miller ≫ Sudo Version1.7.2p5
Todd Miller ≫ Sudo Version1.7.2p6
Todd Miller ≫ Sudo Version1.7.2p7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.204
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C