Red Hat Security Advisory

RHSA-2011:0599

sudo security and bug fix update

Released 2011-05-19 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) sudo-1.7.4p5-5.el6
Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.7.4p5-5.el6
Red Hat Enterprise Linux Server (v. 6) sudo-1.7.4p5-5.el6
Red Hat Enterprise Linux Workstation (v. 6) sudo-1.7.4p5-5.el6

Fixes 1 record

TI-2011-00010 CVE-2011-0010 · GHSA-mxvj-5g45-2vv5

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require…

LOW 21

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authe…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00496 Published 2011-01-18 Fixed CWE-264