Red Hat Security AdvisoryRHSA-2013:1701
sudo security, bug fix and enhancement update
Released 2013-11-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) sudo-1.8.6p3-12.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) sudo-1.8.6p3-12.el6, sudo-devel-1.8.6p3-12.el6
- Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.8.6p3-12.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) sudo-1.8.6p3-12.el6, sudo-devel-1.8.6p3-12.el6
- Red Hat Enterprise Linux Server (v. 6) sudo-1.8.6p3-12.el6
- Red Hat Enterprise Linux Server Optional (v. 6) sudo-1.8.6p3-12.el6, sudo-devel-1.8.6p3-12.el6, sudo-devel-1.8.6p3-12.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) sudo-1.8.6p3-12.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) sudo-1.8.6p3-12.el6, sudo-devel-1.8.6p3-12.el6
Fixes 3 records
Priority LOW 36
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system c…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.03176 · Published 2013-03-04 · Fixed CWE-264
Priority LOW 21
sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which a…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.0037 · Published 2013-04-08 · Fixed CWE-264
Priority LOW 20
sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorizatio…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00364 · Published 2013-04-08 · Fixed CWE-264
THREATIST.IORead the docs