{
  "affected": [],
  "aliases": [
    "CVE-2010-1163"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2010-04-16T19:30:00Z",
    "severity": "MODERATE"
  },
  "details": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
  "id": "GHSA-hh7m-2j26-qw2m",
  "modified": "2022-05-02T06:19:37Z",
  "published": "2022-05-02T06:19:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/39384"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/39399"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/39474"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/39543"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/43068"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019"
    },
    {
      "type": "WEB",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0075"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/63878"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2010-0361.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/510827/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/510846/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/510880/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/514489/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/39468"
    },
    {
      "type": "WEB",
      "url": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-928-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/0881"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/0895"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/0904"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/0949"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/0956"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/1019"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0212"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "sudo-1.8.18p1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the sudo-1.8.18p1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10551",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10551-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-1163 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-1163/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-1646 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-1646/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2011-0010 page",
        "url": "https://www.suse.com/security/cve/CVE-2011-0010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2012-2337 page",
        "url": "https://www.suse.com/security/cve/CVE-2012-2337/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-1775 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-1775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-1776 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-1776/"
      }
    ],
    "title": "sudo-1.8.18p1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10551-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.8.18p1-1.1.aarch64",
                "product": {
                  "name": "sudo-1.8.18p1-1.1.aarch64",
                  "product_id": "sudo-1.8.18p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.8.18p1-1.1.aarch64",
                "product": {
                  "name": "sudo-devel-1.8.18p1-1.1.aarch64",
                  "product_id": "sudo-devel-1.8.18p1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.8.18p1-1.1.aarch64",
                "product": {
                  "name": "sudo-test-1.8.18p1-1.1.aarch64",
                  "product_id": "sudo-test-1.8.18p1-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.8.18p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-1.8.18p1-1.1.ppc64le",
                  "product_id": "sudo-1.8.18p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.8.18p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-devel-1.8.18p1-1.1.ppc64le",
                  "product_id": "sudo-devel-1.8.18p1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.8.18p1-1.1.ppc64le",
                "product": {
                  "name": "sudo-test-1.8.18p1-1.1.ppc64le",
                  "product_id": "sudo-test-1.8.18p1-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.8.18p1-1.1.s390x",
                "product": {
                  "name": "sudo-1.8.18p1-1.1.s390x",
                  "product_id": "sudo-1.8.18p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.8.18p1-1.1.s390x",
                "product": {
                  "name": "sudo-devel-1.8.18p1-1.1.s390x",
                  "product_id": "sudo-devel-1.8.18p1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.8.18p1-1.1.s390x",
                "product": {
                  "name": "sudo-test-1.8.18p1-1.1.s390x",
                  "product_id": "sudo-test-1.8.18p1-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-1.8.18p1-1.1.x86_64",
                "product": {
                  "name": "sudo-1.8.18p1-1.1.x86_64",
                  "product_id": "sudo-1.8.18p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-devel-1.8.18p1-1.1.x86_64",
                "product": {
                  "name": "sudo-devel-1.8.18p1-1.1.x86_64",
                  "product_id": "sudo-devel-1.8.18p1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "sudo-test-1.8.18p1-1.1.x86_64",
                "product": {
                  "name": "sudo-test-1.8.18p1-1.1.x86_64",
                  "product_id": "sudo-test-1.8.18p1-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.8.18p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64"
        },
        "product_reference": "sudo-1.8.18p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.8.18p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le"
        },
        "product_reference": "sudo-1.8.18p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.8.18p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x"
        },
        "product_reference": "sudo-1.8.18p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-1.8.18p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64"
        },
        "product_reference": "sudo-1.8.18p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.8.18p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64"
        },
        "product_reference": "sudo-devel-1.8.18p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.8.18p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le"
        },
        "product_reference": "sudo-devel-1.8.18p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.8.18p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x"
        },
        "product_reference": "sudo-devel-1.8.18p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-devel-1.8.18p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64"
        },
        "product_reference": "sudo-devel-1.8.18p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.8.18p1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64"
        },
        "product_reference": "sudo-test-1.8.18p1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.8.18p1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le"
        },
        "product_reference": "sudo-test-1.8.18p1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.8.18p1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x"
        },
        "product_reference": "sudo-test-1.8.18p1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-test-1.8.18p1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        },
        "product_reference": "sudo-test-1.8.18p1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2010-1163",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-1163"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-1163",
          "url": "https://www.suse.com/security/cve/CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 594738 for CVE-2010-1163",
          "url": "https://bugzilla.suse.com/594738"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-1163"
    },
    {
      "cve": "CVE-2010-1646",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-1646"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-1646",
          "url": "https://www.suse.com/security/cve/CVE-2010-1646"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 594738 for CVE-2010-1646",
          "url": "https://bugzilla.suse.com/594738"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-1646"
    },
    {
      "cve": "CVE-2011-0010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2011-0010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2011-0010",
          "url": "https://www.suse.com/security/cve/CVE-2011-0010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 663881 for CVE-2011-0010",
          "url": "https://bugzilla.suse.com/663881"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2011-0010"
    },
    {
      "cve": "CVE-2012-2337",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2012-2337"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2012-2337",
          "url": "https://www.suse.com/security/cve/CVE-2012-2337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 762327 for CVE-2012-2337",
          "url": "https://bugzilla.suse.com/762327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 826687 for CVE-2012-2337",
          "url": "https://bugzilla.suse.com/826687"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2012-2337"
    },
    {
      "cve": "CVE-2013-1775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-1775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-1775",
          "url": "https://www.suse.com/security/cve/CVE-2013-1775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 806919 for CVE-2013-1775",
          "url": "https://bugzilla.suse.com/806919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 806921 for CVE-2013-1775",
          "url": "https://bugzilla.suse.com/806921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 815325 for CVE-2013-1775",
          "url": "https://bugzilla.suse.com/815325"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 845568 for CVE-2013-1775",
          "url": "https://bugzilla.suse.com/845568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-1775"
    },
    {
      "cve": "CVE-2013-1776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-1776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
          "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-1776",
          "url": "https://www.suse.com/security/cve/CVE-2013-1776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 806921 for CVE-2013-1776",
          "url": "https://bugzilla.suse.com/806921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 817349 for CVE-2013-1776",
          "url": "https://bugzilla.suse.com/817349"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 817350 for CVE-2013-1776",
          "url": "https://bugzilla.suse.com/817350"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-devel-1.8.18p1-1.1.x86_64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.aarch64",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.ppc64le",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.s390x",
            "openSUSE Tumbleweed:sudo-test-1.8.18p1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-1776"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "CTPOS versions ant\u00e9rieures \u00e0 6.6R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Juniper Security Threat Response Manager versions 2012.1, 2013.1, 2013.2",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "CTPView versions 4.2, 4.3, 4.4, 4.5, 4.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space jusqu\u0027\u00e0 la version 13.3",
      "product": {
        "name": "Junos Space",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Juniper Secure Analytics versions 2013.2, 2014.1, 2014.2",
      "product": {
        "name": "Secure Analytics",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Network and Security Manager (NSM) version 2012.2",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3158"
    },
    {
      "name": "CVE-2010-3853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3853"
    },
    {
      "name": "CVE-2014-0075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0075"
    },
    {
      "name": "CVE-2010-3081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3081"
    },
    {
      "name": "CVE-2012-0789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0789"
    },
    {
      "name": "CVE-2012-2329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2329"
    },
    {
      "name": "CVE-2014-0460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0460"
    },
    {
      "name": "CVE-2011-4609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
    },
    {
      "name": "CVE-2011-0421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0421"
    },
    {
      "name": "CVE-2012-0781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0781"
    },
    {
      "name": "CVE-2014-4827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4827"
    },
    {
      "name": "CVE-2013-1635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1635"
    },
    {
      "name": "CVE-2011-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0216"
    },
    {
      "name": "CVE-2013-1620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1620"
    },
    {
      "name": "CVE-2014-0119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
    },
    {
      "name": "CVE-2012-2110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
    },
    {
      "name": "CVE-2014-7186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7186"
    },
    {
      "name": "CVE-2009-2416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-2416"
    },
    {
      "name": "CVE-2012-0788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0788"
    },
    {
      "name": "CVE-2010-4755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4755"
    },
    {
      "name": "CVE-2013-1775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1775"
    },
    {
      "name": "CVE-2009-5029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
    },
    {
      "name": "CVE-2011-1153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1153"
    },
    {
      "name": "CVE-2009-3563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3563"
    },
    {
      "name": "CVE-2014-0411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0411"
    },
    {
      "name": "CVE-2013-1643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1643"
    },
    {
      "name": "CVE-2013-0791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0791"
    },
    {
      "name": "CVE-2010-1646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1646"
    },
    {
      "name": "CVE-2014-7169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7169"
    },
    {
      "name": "CVE-2011-1944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1944"
    },
    {
      "name": "CVE-2014-0099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0099"
    },
    {
      "name": "CVE-2011-0010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0010"
    },
    {
      "name": "CVE-2011-1398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1398"
    },
    {
      "name": "CVE-2011-2834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2834"
    },
    {
      "name": "CVE-2014-4825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4825"
    },
    {
      "name": "CVE-2010-4707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4707"
    },
    {
      "name": "CVE-2012-0882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0882"
    },
    {
      "name": "CVE-2009-0159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0159"
    },
    {
      "name": "CVE-2014-0453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0453"
    },
    {
      "name": "CVE-2011-0708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0708"
    },
    {
      "name": "CVE-2014-6271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6271"
    },
    {
      "name": "CVE-2014-6277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6277"
    },
    {
      "name": "CVE-2014-1568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-1568"
    },
    {
      "name": "CVE-2010-0830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
    },
    {
      "name": "CVE-2010-0426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0426"
    },
    {
      "name": "CVE-2014-0423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0423"
    },
    {
      "name": "CVE-2012-2311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2311"
    },
    {
      "name": "CVE-2014-0224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0224"
    },
    {
      "name": "CVE-2014-4830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4830"
    },
    {
      "name": "CVE-2011-3368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3368"
    },
    {
      "name": "CVE-2014-2532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-2532"
    },
    {
      "name": "CVE-2014-4828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4828"
    },
    {
      "name": "CVE-2014-0095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0095"
    },
    {
      "name": "CVE-2010-0427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0427"
    },
    {
      "name": "CVE-2014-3470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3470"
    },
    {
      "name": "CVE-2014-3062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3062"
    },
    {
      "name": "CVE-2012-0831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0831"
    },
    {
      "name": "CVE-2009-2414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-2414"
    },
    {
      "name": "CVE-2012-0057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0057"
    },
    {
      "name": "CVE-2014-7187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7187"
    },
    {
      "name": "CVE-2010-2956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2956"
    },
    {
      "name": "CVE-2011-3905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3905"
    },
    {
      "name": "CVE-2014-4833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4833"
    },
    {
      "name": "CVE-2011-4566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4566"
    },
    {
      "name": "CVE-2014-0837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0837"
    },
    {
      "name": "CVE-2010-4008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4008"
    },
    {
      "name": "CVE-2014-6278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6278"
    },
    {
      "name": "CVE-2012-1172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1172"
    },
    {
      "name": "CVE-2014-0076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0076"
    },
    {
      "name": "CVE-2010-1163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1163"
    },
    {
      "name": "CVE-2011-4317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4317"
    },
    {
      "name": "CVE-2011-4885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4885"
    },
    {
      "name": "CVE-2010-5107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-5107"
    },
    {
      "name": "CVE-2009-1265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1265"
    },
    {
      "name": "CVE-2010-3316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3316"
    },
    {
      "name": "CVE-2012-3510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3510"
    },
    {
      "name": "CVE-2011-5000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-5000"
    },
    {
      "name": "CVE-2010-3435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3435"
    },
    {
      "name": "CVE-2011-3919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3919"
    },
    {
      "name": "CVE-2012-2337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2337"
    },
    {
      "name": "CVE-2011-1089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
    },
    {
      "name": "CVE-2014-0096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0096"
    },
    {
      "name": "CVE-2013-5908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5908"
    },
    {
      "name": "CVE-2014-3091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3091"
    },
    {
      "name": "CVE-2012-2131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2131"
    }
  ],
  "initial_release_date": "2014-11-13T00:00:00",
  "last_revision_date": "2014-11-13T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-480",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eJuniper\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une\nex\u00e9cution de code arbitraire et un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10661 du 11 novembre 2014",
      "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10661"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10657 du 11 novembre 2014",
      "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10657"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10658 du 11 novembre 2014",
      "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10658"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10659 du 11 novembre 2014",
      "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10659"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10660 du 11 novembre 2014",
      "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10660"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated sudo package that fixes one security issue is now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The sudo (superuser do) utility allows system administrators to give\ncertain users the ability to run commands as root.\n\nThe RHBA-2010:0212 sudo update released as part of Red Hat Enterprise Linux\n5.5 added the ability to change the value of the ignore_dot option in the\n\"/etc/sudoers\" configuration file. This ability introduced a regression in\nthe upstream fix for CVE-2010-0426. In configurations where the ignore_dot\noption was set to off (the default is on for the Red Hat Enterprise Linux 5\nsudo package), a local user authorized to use the sudoedit pseudo-command\ncould possibly run arbitrary commands with the privileges of the users\nsudoedit was authorized to run as. (CVE-2010-1163)\n\nRed Hat would like to thank Todd C. Miller, the upstream sudo maintainer,\nfor responsibly reporting this issue. Upstream acknowledges Valerio\nCostamagna as the original reporter.\n\nUsers of sudo should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0361",
        "url": "https://access.redhat.com/errata/RHSA-2010:0361"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#moderate",
        "url": "http://www.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "580441",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0361.json"
      }
    ],
    "title": "Red Hat Security Advisory: sudo security update",
    "tracking": {
      "current_release_date": "2024-11-22T03:20:52+00:00",
      "generator": {
        "date": "2024-11-22T03:20:52+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2010:0361",
      "initial_release_date": "2010-04-20T15:43:00+00:00",
      "revision_history": [
        {
          "date": "2010-04-20T15:43:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-04-20T11:43:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:20:52+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.src",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Valerio Costamagna"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2010-1163",
      "discovery_date": "2010-04-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "580441"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-0:1.7.2p1-6.el5_5.src",
          "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-0:1.7.2p1-6.el5_5.src",
          "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "RHBZ#580441",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163"
        }
      ],
      "release_date": "2010-04-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-04-20T15:43:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0361"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated sudo package that fixes one security issue is now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The sudo (superuser do) utility allows system administrators to give\ncertain users the ability to run commands as root.\n\nThe RHBA-2010:0212 sudo update released as part of Red Hat Enterprise Linux\n5.5 added the ability to change the value of the ignore_dot option in the\n\"/etc/sudoers\" configuration file. This ability introduced a regression in\nthe upstream fix for CVE-2010-0426. In configurations where the ignore_dot\noption was set to off (the default is on for the Red Hat Enterprise Linux 5\nsudo package), a local user authorized to use the sudoedit pseudo-command\ncould possibly run arbitrary commands with the privileges of the users\nsudoedit was authorized to run as. (CVE-2010-1163)\n\nRed Hat would like to thank Todd C. Miller, the upstream sudo maintainer,\nfor responsibly reporting this issue. Upstream acknowledges Valerio\nCostamagna as the original reporter.\n\nUsers of sudo should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0361",
        "url": "https://access.redhat.com/errata/RHSA-2010:0361"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#moderate",
        "url": "http://www.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "580441",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0361.json"
      }
    ],
    "title": "Red Hat Security Advisory: sudo security update",
    "tracking": {
      "current_release_date": "2025-10-09T13:38:27+00:00",
      "generator": {
        "date": "2025-10-09T13:38:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.9"
        }
      },
      "id": "RHSA-2010:0361",
      "initial_release_date": "2010-04-20T15:43:00+00:00",
      "revision_history": [
        {
          "date": "2010-04-20T15:43:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-04-20T11:43:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-10-09T13:38:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.src",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Valerio Costamagna"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2010-1163",
      "discovery_date": "2010-04-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "580441"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-0:1.7.2p1-6.el5_5.src",
          "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-0:1.7.2p1-6.el5_5.src",
          "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "RHBZ#580441",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163"
        }
      ],
      "release_date": "2010-04-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-04-20T15:43:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0361"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated sudo package that fixes one security issue is now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The sudo (superuser do) utility allows system administrators to give\ncertain users the ability to run commands as root.\n\nThe RHBA-2010:0212 sudo update released as part of Red Hat Enterprise Linux\n5.5 added the ability to change the value of the ignore_dot option in the\n\"/etc/sudoers\" configuration file. This ability introduced a regression in\nthe upstream fix for CVE-2010-0426. In configurations where the ignore_dot\noption was set to off (the default is on for the Red Hat Enterprise Linux 5\nsudo package), a local user authorized to use the sudoedit pseudo-command\ncould possibly run arbitrary commands with the privileges of the users\nsudoedit was authorized to run as. (CVE-2010-1163)\n\nRed Hat would like to thank Todd C. Miller, the upstream sudo maintainer,\nfor responsibly reporting this issue. Upstream acknowledges Valerio\nCostamagna as the original reporter.\n\nUsers of sudo should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0361",
        "url": "https://access.redhat.com/errata/RHSA-2010:0361"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#moderate",
        "url": "http://www.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "580441",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0361.json"
      }
    ],
    "title": "Red Hat Security Advisory: sudo security update",
    "tracking": {
      "current_release_date": "2025-10-09T13:38:27+00:00",
      "generator": {
        "date": "2025-10-09T13:38:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.9"
        }
      },
      "id": "RHSA-2010:0361",
      "initial_release_date": "2010-04-20T15:43:00+00:00",
      "revision_history": [
        {
          "date": "2010-04-20T15:43:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-04-20T11:43:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-10-09T13:38:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.src",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo-debuginfo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                "product": {
                  "name": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_id": "sudo-0:1.7.2p1-6.el5_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/sudo@1.7.2p1-6.el5_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.src"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        },
        "product_reference": "sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Valerio Costamagna"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2010-1163",
      "discovery_date": "2010-04-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "580441"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-0:1.7.2p1-6.el5_5.src",
          "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-0:1.7.2p1-6.el5_5.src",
          "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
          "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "RHBZ#580441",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580441"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1163"
        }
      ],
      "release_date": "2010-04-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-04-20T15:43:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0361"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Client:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-0:1.7.2p1-6.el5_5.src",
            "5Client:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Client:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-0:1.7.2p1-6.el5_5.src",
            "5Server:sudo-0:1.7.2p1-6.el5_5.x86_64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.i386",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ia64",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.ppc",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.s390x",
            "5Server:sudo-debuginfo-0:1.7.2p1-6.el5_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "sudo: incomplete fix for the sudoedit privilege escalation issue CVE-2010-0426"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2010-1163",
    "description": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
    "id": "GSD-2010-1163",
    "references": [
      "https://www.suse.com/security/cve/CVE-2010-1163.html",
      "https://access.redhat.com/errata/RHSA-2010:0361",
      "https://linux.oracle.com/cve/CVE-2010-1163.html",
      "https://packetstormsecurity.com/files/cve/CVE-2010-1163"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2010-1163"
      ],
      "details": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.",
      "id": "GSD-2010-1163",
      "modified": "2023-12-13T01:21:32.359811Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2010-1163",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
          },
          {
            "name": "http://secunia.com/advisories/43068",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/43068"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2011/0212",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2011/0212"
          },
          {
            "name": "http://wiki.rpath.com/Advisories:rPSA-2010-0075",
            "refsource": "MISC",
            "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0075"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/514489/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/514489/100/0/threaded"
          },
          {
            "name": "http://secunia.com/advisories/39399",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/39399"
          },
          {
            "name": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019",
            "refsource": "MISC",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/0949",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/0949"
          },
          {
            "name": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html",
            "refsource": "MISC",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html"
          },
          {
            "name": "http://secunia.com/advisories/39384",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/39384"
          },
          {
            "name": "http://secunia.com/advisories/39474",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/39474"
          },
          {
            "name": "http://secunia.com/advisories/39543",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/39543"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078"
          },
          {
            "name": "http://www.osvdb.org/63878",
            "refsource": "MISC",
            "url": "http://www.osvdb.org/63878"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2010-0361.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0361.html"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/510827/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/510827/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/510846/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/510846/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/510880/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/510880/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/bid/39468",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/39468"
          },
          {
            "name": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html",
            "refsource": "MISC",
            "url": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-928-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-928-1"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/0881",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/0881"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/0895",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/0895"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/0904",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/0904"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/0956",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/0956"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2010/1019",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2010/1019"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p17:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p18:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p19:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.6.9_p22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2010-1163"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "39384",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/39384"
            },
            {
              "name": "39468",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/39468"
            },
            {
              "name": "USN-928-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-928-1"
            },
            {
              "name": "39474",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/39474"
            },
            {
              "name": "ADV-2010-0881",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2010/0881"
            },
            {
              "name": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html"
            },
            {
              "name": "ADV-2010-0895",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2010/0895"
            },
            {
              "name": "RHSA-2010:0361",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0361.html"
            },
            {
              "name": "39543",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/39543"
            },
            {
              "name": "SSA:2010-110-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019"
            },
            {
              "name": "MDVSA-2010:078",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078"
            },
            {
              "name": "FEDORA-2010-6756",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html"
            },
            {
              "name": "39399",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/39399"
            },
            {
              "name": "ADV-2010-0956",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/0956"
            },
            {
              "name": "ADV-2010-0949",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/0949"
            },
            {
              "name": "ADV-2010-1019",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/1019"
            },
            {
              "name": "ADV-2010-0904",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/0904"
            },
            {
              "name": "63878",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/63878"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2010-0075",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0075"
            },
            {
              "name": "SUSE-SR:2011:002",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
            },
            {
              "name": "43068",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/43068"
            },
            {
              "name": "ADV-2011-0212",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2011/0212"
            },
            {
              "name": "sudo-sudoefit-privilege-escalation(57836)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836"
            },
            {
              "name": "oval:org.mitre.oval:def:9382",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382"
            },
            {
              "name": "20101027 rPSA-2010-0075-1 sudo",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/514489/100/0/threaded"
            },
            {
              "name": "20100422 Re: sudoedit local privilege escalation through PATH manipulation",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/510880/100/0/threaded"
            },
            {
              "name": "20100420 Re: sudoedit local privilege escalation through PATH manipulation",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/510846/100/0/threaded"
            },
            {
              "name": "20100419 sudoedit local privilege escalation through PATH manipulation",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/510827/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.4,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-10T19:55Z",
      "publishedDate": "2010-04-16T19:30Z"
    }
  }
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6419309-385F-4525-AD4B-C73B1A3ED935",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*",
              "matchCriteriaId": "51F7E821-2908-47F1-9665-E9D68ECC242F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C90D0AB4-F8A8-4301-99B5-757254FA999A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A79C7098-37D0-4E6E-A22C-3C771D81956F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB7D2832-B654-406E-AA34-B3BD1D6F0A2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5688D95-89EF-4D2E-9728-2316CAC3CBE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*",
              "matchCriteriaId": "B69E49B2-1B3C-4434-ACF1-CF4F519E3C32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*",
              "matchCriteriaId": "31B2C299-5D0B-44DA-91FD-4B1146BE9A7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.8p7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B570E525-A024-4D41-9600-1134433786DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p17:*:*:*:*:*:*:*",
              "matchCriteriaId": "471284F9-21EF-4ED6-860F-AB86154CCDF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p18:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C91FEB5-CEF5-4C66-A8D2-AE80EA32B10D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p19:*:*:*:*:*:*:*",
              "matchCriteriaId": "E106EBA5-14B3-48F7-BE00-9F0ABD57C33B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p20:*:*:*:*:*:*:*",
              "matchCriteriaId": "215B0725-5314-49E6-8A96-2106860F4304",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p21:*:*:*:*:*:*:*",
              "matchCriteriaId": "E35B5C93-D197-4ADE-88F3-679311B083B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.6.9_p22:*:*:*:*:*:*:*",
              "matchCriteriaId": "99854E9D-4D84-44D9-AB68-175A3048EA34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "643ABD1F-83E1-4B71-AA59-8CF8B4018A46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8967DE4C-3D41-4BCE-97B0-469FCFBCE332",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2C91B0A-44B6-4B33-A0ED-295C56D97546",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*",
              "matchCriteriaId": "07945224-A955-4A33-B54B-11D128FCA0F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*",
              "matchCriteriaId": "41F70C45-9522-4F49-A5B9-62E03410F03E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEAE0BA2-D9AC-40A3-A4DC-1E33DEE7200C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for \".\", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426."
    },
    {
      "lang": "es",
      "value": "El comando de funcionalidad matching en sudo v1.6.8 hasta v1.7.2p5 no maneja adecuadamente cuando un fichero en el directorio actual de trabajo tiene el mismo nombre que un pseudo-comando en el archivo dudoers y que contiene en la ruta una entrada para \".\", lo que permite a usuarios locales ejecutar comandos de su elecci\u00f3n a trav\u00e9s de un troyano ejecutable, como ha sido demostrado usando sudoedit, una vulnerabilidad diferente que CVE-2010-0426."
    }
  ],
  "id": "CVE-2010-1163",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.9,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-04-16T19:30:00.523",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39384"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/39399"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39474"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/39543"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/43068"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0075"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.osvdb.org/63878"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2010-0361.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/510827/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/510846/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/510880/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/514489/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/39468"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-928-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0881"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0895"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2010/0904"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2010/0949"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2010/0956"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2010/1019"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2011/0212"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39384"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/39399"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39474"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/39543"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/43068"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.577019"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0075"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:078"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/63878"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2010-0361.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/510827/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/510846/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/510880/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/514489/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/39468"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-928-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0881"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0895"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/0904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/0949"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/0956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/1019"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2011/0212"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57836"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}