rhsa-2011:0599
Vulnerability from csaf_redhat
Published
2011-05-19 11:11
Modified
2024-11-22 04:05
Summary
Red Hat Security Advisory: sudo security and bug fix update

Notes

Topic
An updated sudo package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Details
The sudo (superuser do) utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the sudo password checking logic. In configurations where the sudoers settings allowed a user to run a command using sudo with only the group ID changed, sudo failed to prompt for the user's password before running the specified command with the elevated group privileges. (CVE-2011-0010) This update also fixes the following bugs: * When the "/etc/sudoers" file contained entries with multiple hosts, running the "sudo -l" command incorrectly reported that a certain user does not have permissions to use sudo on the system. With this update, running the "sudo -l" command now produces the correct output. (BZ#603823) * Prior to this update, the manual page for sudoers.ldap was not installed, even though it contains important information on how to set up an LDAP (Lightweight Directory Access Protocol) sudoers source, and other documents refer to it. With this update, the manual page is now properly included in the package. Additionally, various POD files have been removed from the package, as they are required for build purposes only. (BZ#634159) * The previous version of sudo did not use the same location for the LDAP configuration files as the nss_ldap package. This has been fixed and sudo now looks for these files in the same location as the nss_ldap package. (BZ#652726) * When a file was edited using the "sudo -e file" or the "sudoedit file" command, the editor being executed for this task was logged only as "sudoedit". With this update, the full path to the executable being used as an editor is now logged (instead of "sudoedit"). (BZ#665131) * A comment regarding the "visiblepw" option of the "Defaults" directive has been added to the default "/etc/sudoers" file to clarify its usage. (BZ#688640) * This erratum upgrades sudo to upstream version 1.7.4p5, which provides a number of bug fixes and enhancements over the previous version. (BZ#615087) All users of sudo are advised to upgrade to this updated package, which resolves these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated sudo package that fixes one security issue and several bugs is\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The sudo (superuser do) utility allows system administrators to give\ncertain users the ability to run commands as root.\n\nA flaw was found in the sudo password checking logic. In configurations\nwhere the sudoers settings allowed a user to run a command using sudo with\nonly the group ID changed, sudo failed to prompt for the user\u0027s password\nbefore running the specified command with the elevated group privileges.\n(CVE-2011-0010)\n\nThis update also fixes the following bugs:\n\n* When the \"/etc/sudoers\" file contained entries with multiple hosts,\nrunning the \"sudo -l\" command incorrectly reported that a certain user does\nnot have permissions to use sudo on the system. With this update, running\nthe \"sudo -l\" command now produces the correct output. (BZ#603823)\n\n* Prior to this update, the manual page for sudoers.ldap was not installed,\neven though it contains important information on how to set up an LDAP\n(Lightweight Directory Access Protocol) sudoers source, and other documents\nrefer to it. With this update, the manual page is now properly included in\nthe package. Additionally, various POD files have been removed from the\npackage, as they are required for build purposes only. (BZ#634159)\n\n* The previous version of sudo did not use the same location for the LDAP\nconfiguration files as the nss_ldap package. This has been fixed and sudo\nnow looks for these files in the same location as the nss_ldap package.\n(BZ#652726)\n\n* When a file was edited using the \"sudo -e file\" or the \"sudoedit file\"\ncommand, the editor being executed for this task was logged only as\n\"sudoedit\". With this update, the full path to the executable being used as\nan editor is now logged (instead of \"sudoedit\"). (BZ#665131)\n\n* A comment regarding the \"visiblepw\" option of the \"Defaults\" directive\nhas been added to the default \"/etc/sudoers\" file to clarify its usage.\n(BZ#688640)\n\n* This erratum upgrades sudo to upstream version 1.7.4p5, which provides a\nnumber of bug fixes and enhancements over the previous version. (BZ#615087)\n\nAll users of sudo are advised to upgrade to this updated package, which\nresolves these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2011:0599",
        "url": "https://access.redhat.com/errata/RHSA-2011:0599"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "603823",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=603823"
      },
      {
        "category": "external",
        "summary": "615087",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615087"
      },
      {
        "category": "external",
        "summary": "634159",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=634159"
      },
      {
        "category": "external",
        "summary": "668879",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=668879"
      },
      {
        "category": "external",
        "summary": "688640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688640"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0599.json"
      }
    ],
    "title": "Red Hat Security Advisory: sudo security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-22T04:05:04+00:00",
      "generator": {
        "date": "2024-11-22T04:05:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2011:0599",
      "initial_release_date": "2011-05-19T11:11:00+00:00",
      "revision_history": [
        {
          "date": "2011-05-19T11:11:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2011-05-19T07:46:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T04:05:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
                  "product_id": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.4p5-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.4p5-5.el6.x86_64",
                "product": {
                  "name": "sudo-0:1.7.4p5-5.el6.x86_64",
                  "product_id": "sudo-0:1.7.4p5-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.4p5-5.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-0:1.7.4p5-5.el6.src",
                "product": {
                  "name": "sudo-0:1.7.4p5-5.el6.src",
                  "product_id": "sudo-0:1.7.4p5-5.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.4p5-5.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
                  "product_id": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.4p5-5.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.4p5-5.el6.i686",
                "product": {
                  "name": "sudo-0:1.7.4p5-5.el6.i686",
                  "product_id": "sudo-0:1.7.4p5-5.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.4p5-5.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
                  "product_id": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.4p5-5.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.4p5-5.el6.ppc64",
                "product": {
                  "name": "sudo-0:1.7.4p5-5.el6.ppc64",
                  "product_id": "sudo-0:1.7.4p5-5.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.4p5-5.el6?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
                  "product_id": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.4p5-5.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.4p5-5.el6.s390x",
                "product": {
                  "name": "sudo-0:1.7.4p5-5.el6.s390x",
                  "product_id": "sudo-0:1.7.4p5-5.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.4p5-5.el6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-0:1.7.4p5-5.el6.src"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.src",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-0:1.7.4p5-5.el6.src"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.src",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-0:1.7.4p5-5.el6.src"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.src",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-0:1.7.4p5-5.el6.src"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.src",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.i686"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2011-0010",
      "discovery_date": "2011-01-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "668879"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: does not ask for password on GID changes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client:sudo-0:1.7.4p5-5.el6.i686",
          "6Client:sudo-0:1.7.4p5-5.el6.ppc64",
          "6Client:sudo-0:1.7.4p5-5.el6.s390x",
          "6Client:sudo-0:1.7.4p5-5.el6.src",
          "6Client:sudo-0:1.7.4p5-5.el6.x86_64",
          "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
          "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
          "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
          "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
          "6ComputeNode:sudo-0:1.7.4p5-5.el6.i686",
          "6ComputeNode:sudo-0:1.7.4p5-5.el6.ppc64",
          "6ComputeNode:sudo-0:1.7.4p5-5.el6.s390x",
          "6ComputeNode:sudo-0:1.7.4p5-5.el6.src",
          "6ComputeNode:sudo-0:1.7.4p5-5.el6.x86_64",
          "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
          "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
          "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
          "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
          "6Server:sudo-0:1.7.4p5-5.el6.i686",
          "6Server:sudo-0:1.7.4p5-5.el6.ppc64",
          "6Server:sudo-0:1.7.4p5-5.el6.s390x",
          "6Server:sudo-0:1.7.4p5-5.el6.src",
          "6Server:sudo-0:1.7.4p5-5.el6.x86_64",
          "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
          "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
          "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
          "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
          "6Workstation:sudo-0:1.7.4p5-5.el6.i686",
          "6Workstation:sudo-0:1.7.4p5-5.el6.ppc64",
          "6Workstation:sudo-0:1.7.4p5-5.el6.s390x",
          "6Workstation:sudo-0:1.7.4p5-5.el6.src",
          "6Workstation:sudo-0:1.7.4p5-5.el6.x86_64",
          "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
          "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
          "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
          "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-0010"
        },
        {
          "category": "external",
          "summary": "RHBZ#668879",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=668879"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-0010",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-0010"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-0010",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0010"
        }
      ],
      "release_date": "2011-01-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-05-19T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "6Client:sudo-0:1.7.4p5-5.el6.i686",
            "6Client:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Client:sudo-0:1.7.4p5-5.el6.s390x",
            "6Client:sudo-0:1.7.4p5-5.el6.src",
            "6Client:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.i686",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.ppc64",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.s390x",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.src",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.x86_64",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6Server:sudo-0:1.7.4p5-5.el6.i686",
            "6Server:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Server:sudo-0:1.7.4p5-5.el6.s390x",
            "6Server:sudo-0:1.7.4p5-5.el6.src",
            "6Server:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6Workstation:sudo-0:1.7.4p5-5.el6.i686",
            "6Workstation:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Workstation:sudo-0:1.7.4p5-5.el6.s390x",
            "6Workstation:sudo-0:1.7.4p5-5.el6.src",
            "6Workstation:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0599"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.2,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Client:sudo-0:1.7.4p5-5.el6.i686",
            "6Client:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Client:sudo-0:1.7.4p5-5.el6.s390x",
            "6Client:sudo-0:1.7.4p5-5.el6.src",
            "6Client:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Client:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.i686",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.ppc64",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.s390x",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.src",
            "6ComputeNode:sudo-0:1.7.4p5-5.el6.x86_64",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6ComputeNode:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6Server:sudo-0:1.7.4p5-5.el6.i686",
            "6Server:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Server:sudo-0:1.7.4p5-5.el6.s390x",
            "6Server:sudo-0:1.7.4p5-5.el6.src",
            "6Server:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Server:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64",
            "6Workstation:sudo-0:1.7.4p5-5.el6.i686",
            "6Workstation:sudo-0:1.7.4p5-5.el6.ppc64",
            "6Workstation:sudo-0:1.7.4p5-5.el6.s390x",
            "6Workstation:sudo-0:1.7.4p5-5.el6.src",
            "6Workstation:sudo-0:1.7.4p5-5.el6.x86_64",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.i686",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.ppc64",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.s390x",
            "6Workstation:sudo-debuginfo-0:1.7.4p5-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "sudo: does not ask for password on GID changes"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.