Todd Miller Sudo Runas Group Local Privilege Escalation Vulnerability

Bugtraq ID: 43019
Class: Design Error
CVE: CVE-2010-2956
Remote: No
Local: Yes
Published: Sep 07 2010 12:00AM
Updated: Jan 05 2011 06:42AM
Credit: Markus Wuethrich
Vulnerable: VMWare ESX 4.1
VMWare ESX 4.0
Ubuntu Ubuntu Linux 9.10 sparc
Ubuntu Ubuntu Linux 9.10 powerpc
Ubuntu Ubuntu Linux 9.10 lpia
Ubuntu Ubuntu Linux 9.10 i386
Ubuntu Ubuntu Linux 9.10 amd64
Ubuntu Ubuntu Linux 9.10
Todd Miller Sudo 1.7
Todd Miller Sudo 1.7.4p3
SuSE openSUSE 11.3
Slackware Linux 10.2
Slackware Linux 10.1
Slackware Linux 10.0
Slackware Linux 9.1
Slackware Linux 9.0
Slackware Linux 8.1
Slackware Linux x86_64 -current
Slackware Linux 13.1 x86_64
Slackware Linux 13.1
Slackware Linux 13.0 x86_64
Slackware Linux 13.0
Slackware Linux 12.2
Slackware Linux 12.1
Slackware Linux 12.0
Slackware Linux 11.0
Slackware Linux -current
S.u.S.E. openSUSE 11.2
rPath rPath Linux 2
rPath Appliance Platform Linux Service 2
RedHat Enterprise Linux 5 server
Red Hat Fedora 14
Red Hat Fedora 13
Red Hat Fedora 12
Red Hat Enterprise Linux Desktop 5 client
MandrakeSoft Linux Mandrake 2010.1 x86_64
MandrakeSoft Linux Mandrake 2010.1
MandrakeSoft Linux Mandrake 2010.0 x86_64
MandrakeSoft Linux Mandrake 2010.0
MandrakeSoft Linux Mandrake 2009.1 x86_64
MandrakeSoft Linux Mandrake 2009.1
Avaya Voice Portal 5.0 SP2
Avaya Voice Portal 5.0 SP1
Avaya Voice Portal 5.0
Avaya IQ 5.1
Avaya IQ 5
Avaya Aura System Platform 6.0
Avaya Aura System Platform 1.1
Avaya Aura System Manager 5.2
Avaya Aura Session Manager 6.0
Avaya Aura Session Manager 5.2 SP2
Avaya Aura Session Manager 5.2 SP1
Avaya Aura Session Manager 5.2
Avaya Aura Session Manager 1.1
Avaya Aura Presence Services 6.0
Avaya Aura Communication Manager 6.0
+ Avaya Communication Manager Server DEFINITY Server SI/CS
+ Avaya Communication Manager Server S8100
+ Avaya Communication Manager Server S8300
+ Avaya Communication Manager Server S8500
+ Avaya Communication Manager Server S8700
Avaya Aura Application Enablement Services 5.2.1
Avaya Aura Application Enablement Services 5.2
Not Vulnerable: Todd Miller Sudo 1.7.4p4


 

Privacy Statement
Copyright 2010, SecurityFocus