Red Hat Security Advisory

RHSA-2010:0475

sudo security update

Released 2010-06-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) sudo-1.7.2p1-7.el5_5, sudo-1.7.2p1-7.el5_5.i386, sudo-1.7.2p1-7.el5_5.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) sudo-1.7.2p1-7.el5_5, sudo-1.7.2p1-7.el5_5.i386

Fixes 1 record

TI-2010-01589 CVE-2010-1646 · GHSA-xww5-hh94-wcq9

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6…

LOW 28

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges vi…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00457 Published 2010-06-07 Fixed CWE-264