Read the docs
TI-2010-01589 Aliases CVE-2010-1646GHSA-xww5-hh94-wcq9

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6…

Priority LOW 28CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

Why it matters now

EPSS 0.00457 39th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 74

CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*1.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2p1:*:*:*:*:*:*:*1.6.2p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2p2:*:*:*:*:*:*:*1.6.2p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:*1.6.2p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:*1.6.3p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:*1.6.3p2VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2p1:*:*:*:*:*:*:* Versions 1.6.2p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2p2:*:*:*:*:*:*:* Versions 1.6.2p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:* Versions 1.6.2p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p1:*:*:*:*:*:*:* Versions 1.6.3p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p2:*:*:*:*:*:*:* Versions 1.6.3p2 Vulnerable ·Todd Miller
Show 64 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:*1.6.3p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:*1.6.3p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:*1.6.3p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:*1.6.3p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:*1.6.3p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:*1.6.4p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*1.6.4p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:*1.6.5p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:*1.6.5p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p1:*:*:*:*:*:*:*1.6.7p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p2:*:*:*:*:*:*:*1.6.7p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p3:*:*:*:*:*:*:*1.6.7p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p4:*:*:*:*:*:*:*1.6.7p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:*1.6.7p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p1:*:*:*:*:*:*:*1.6.8p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p2:*:*:*:*:*:*:*1.6.8p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p3:*:*:*:*:*:*:*1.6.8p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p4:*:*:*:*:*:*:*1.6.8p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p5:*:*:*:*:*:*:*1.6.8p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p6:*:*:*:*:*:*:*1.6.8p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:*1.6.8p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p8:*:*:*:*:*:*:*1.6.8p8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p9:*:*:*:*:*:*:*1.6.8p9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p10:*:*:*:*:*:*:*1.6.8p10VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p11:*:*:*:*:*:*:*1.6.8p11VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:*1.6.8p12VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*1.6.9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p1:*:*:*:*:*:*:*1.6.9p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p2:*:*:*:*:*:*:*1.6.9p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p3:*:*:*:*:*:*:*1.6.9p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p4:*:*:*:*:*:*:*1.6.9p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p5:*:*:*:*:*:*:*1.6.9p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p6:*:*:*:*:*:*:*1.6.9p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p7:*:*:*:*:*:*:*1.6.9p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p8:*:*:*:*:*:*:*1.6.9p8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p9:*:*:*:*:*:*:*1.6.9p9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p10:*:*:*:*:*:*:*1.6.9p10VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p11:*:*:*:*:*:*:*1.6.9p11VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p12:*:*:*:*:*:*:*1.6.9p12VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p13:*:*:*:*:*:*:*1.6.9p13VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p14:*:*:*:*:*:*:*1.6.9p14VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p15:*:*:*:*:*:*:*1.6.9p15VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p16:*:*:*:*:*:*:*1.6.9p16VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p17:*:*:*:*:*:*:*1.6.9p17VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p18:*:*:*:*:*:*:*1.6.9p18VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p19:*:*:*:*:*:*:*1.6.9p19VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:*1.6.9p20VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:*1.6.9p21VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:*1.6.9p22VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*1.7.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*1.7.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*1.7.2p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*1.7.2p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*1.7.2p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*1.7.2p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*1.7.2p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*1.7.2p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*1.7.2p7VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p3:*:*:*:*:*:*:* Versions 1.6.3p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p4:*:*:*:*:*:*:* Versions 1.6.3p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p5:*:*:*:*:*:*:* Versions 1.6.3p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p6:*:*:*:*:*:*:* Versions 1.6.3p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3p7:*:*:*:*:*:*:* Versions 1.6.3p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4p1:*:*:*:*:*:*:* Versions 1.6.4p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:* Versions 1.6.4p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5p1:*:*:*:*:*:*:* Versions 1.6.5p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5p2:*:*:*:*:*:*:* Versions 1.6.5p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p1:*:*:*:*:*:*:* Versions 1.6.7p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p2:*:*:*:*:*:*:* Versions 1.6.7p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p3:*:*:*:*:*:*:* Versions 1.6.7p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p4:*:*:*:*:*:*:* Versions 1.6.7p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:* Versions 1.6.7p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p1:*:*:*:*:*:*:* Versions 1.6.8p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p2:*:*:*:*:*:*:* Versions 1.6.8p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p3:*:*:*:*:*:*:* Versions 1.6.8p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p4:*:*:*:*:*:*:* Versions 1.6.8p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p5:*:*:*:*:*:*:* Versions 1.6.8p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p6:*:*:*:*:*:*:* Versions 1.6.8p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:* Versions 1.6.8p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p8:*:*:*:*:*:*:* Versions 1.6.8p8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p9:*:*:*:*:*:*:* Versions 1.6.8p9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p10:*:*:*:*:*:*:* Versions 1.6.8p10 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p11:*:*:*:*:*:*:* Versions 1.6.8p11 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:* Versions 1.6.8p12 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:* Versions 1.6.9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p1:*:*:*:*:*:*:* Versions 1.6.9p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p2:*:*:*:*:*:*:* Versions 1.6.9p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p3:*:*:*:*:*:*:* Versions 1.6.9p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p4:*:*:*:*:*:*:* Versions 1.6.9p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p5:*:*:*:*:*:*:* Versions 1.6.9p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p6:*:*:*:*:*:*:* Versions 1.6.9p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p7:*:*:*:*:*:*:* Versions 1.6.9p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p8:*:*:*:*:*:*:* Versions 1.6.9p8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p9:*:*:*:*:*:*:* Versions 1.6.9p9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p10:*:*:*:*:*:*:* Versions 1.6.9p10 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p11:*:*:*:*:*:*:* Versions 1.6.9p11 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p12:*:*:*:*:*:*:* Versions 1.6.9p12 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p13:*:*:*:*:*:*:* Versions 1.6.9p13 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p14:*:*:*:*:*:*:* Versions 1.6.9p14 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p15:*:*:*:*:*:*:* Versions 1.6.9p15 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p16:*:*:*:*:*:*:* Versions 1.6.9p16 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p17:*:*:*:*:*:*:* Versions 1.6.9p17 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p18:*:*:*:*:*:*:* Versions 1.6.9p18 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p19:*:*:*:*:*:*:* Versions 1.6.9p19 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:* Versions 1.6.9p20 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:* Versions 1.6.9p21 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:* Versions 1.6.9p22 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:* Versions 1.7.2p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:* Versions 1.7.2p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:* Versions 1.7.2p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:* Versions 1.7.2p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:* Versions 1.7.2p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:* Versions 1.7.2p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:* Versions 1.7.2p7 Vulnerable ·Todd Miller

Remediation

Red Hat 1 advisory

  • RHSA-2010:0475 Released 2010-06-16 · Red Hat rating Moderate
    sudo security update
    • Red Hat Enterprise Linux (v. 5 server) sudo-1.7.2p1-7.el5_5, sudo-1.7.2p1-7.el5_5.i386, sudo-1.7.2p1-7.el5_5.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) sudo-1.7.2p1-7.el5_5, sudo-1.7.2p1-7.el5_5.i386

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2010:0475
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2010:0475

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1646
  2. 2026-10-03 Alias added: GHSA-xww5-hh94-wcq9

References

Exploit 2

Advisory 9

Other 10

  • TI-2005-01738 Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local… CVSS 3.1HIGH 8.4
  • TI-2012-00746 Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1… CVSS 2.0HIGH 7.2
  • TI-2013-01562 sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or… CVSS 2.0MEDIUM 6.9
  • TI-2004-00948 sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style… CVSS 2.0HIGH 7.2
  • TI-2010-00404 sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled… CVSS 2.0MEDIUM 6.9
  • TI-2006-00144 sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable… CVSS 2.0HIGH 7.2
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences