CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1646

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.3%

CVSS Severity

CVSS v2 Score 6.2

References

Products affected by CVE-2010-1646

Todd Miller » Sudo » Version: 1.3.1

cpe:2.3:a:todd_miller:sudo:1.3.1
Todd Miller » Sudo » Version: 1.6

cpe:2.3:a:todd_miller:sudo:1.6
Todd Miller » Sudo » Version: 1.6.1

cpe:2.3:a:todd_miller:sudo:1.6.1
Todd Miller » Sudo » Version: 1.6.2

cpe:2.3:a:todd_miller:sudo:1.6.2
Todd Miller » Sudo » Version: 1.6.2p1

cpe:2.3:a:todd_miller:sudo:1.6.2p1
Todd Miller » Sudo » Version: 1.6.2p2

cpe:2.3:a:todd_miller:sudo:1.6.2p2
Todd Miller » Sudo » Version: 1.6.2p3

cpe:2.3:a:todd_miller:sudo:1.6.2p3
Todd Miller » Sudo » Version: 1.6.3

cpe:2.3:a:todd_miller:sudo:1.6.3
Todd Miller » Sudo » Version: 1.6.3p1

cpe:2.3:a:todd_miller:sudo:1.6.3p1
Todd Miller » Sudo » Version: 1.6.3p2

cpe:2.3:a:todd_miller:sudo:1.6.3p2
Todd Miller » Sudo » Version: 1.6.3p3

cpe:2.3:a:todd_miller:sudo:1.6.3p3
Todd Miller » Sudo » Version: 1.6.3p4

cpe:2.3:a:todd_miller:sudo:1.6.3p4
Todd Miller » Sudo » Version: 1.6.3p5

cpe:2.3:a:todd_miller:sudo:1.6.3p5
Todd Miller » Sudo » Version: 1.6.3p6

cpe:2.3:a:todd_miller:sudo:1.6.3p6
Todd Miller » Sudo » Version: 1.6.3p7

cpe:2.3:a:todd_miller:sudo:1.6.3p7
Todd Miller » Sudo » Version: 1.6.4

cpe:2.3:a:todd_miller:sudo:1.6.4
Todd Miller » Sudo » Version: 1.6.4p1

cpe:2.3:a:todd_miller:sudo:1.6.4p1
Todd Miller » Sudo » Version: 1.6.4p2

cpe:2.3:a:todd_miller:sudo:1.6.4p2
Todd Miller » Sudo » Version: 1.6.5

cpe:2.3:a:todd_miller:sudo:1.6.5
Todd Miller » Sudo » Version: 1.6.5p1

cpe:2.3:a:todd_miller:sudo:1.6.5p1
Todd Miller » Sudo » Version: 1.6.5p2

cpe:2.3:a:todd_miller:sudo:1.6.5p2
Todd Miller » Sudo » Version: 1.6.6

cpe:2.3:a:todd_miller:sudo:1.6.6
Todd Miller » Sudo » Version: 1.6.7

cpe:2.3:a:todd_miller:sudo:1.6.7
Todd Miller » Sudo » Version: 1.6.7p1

cpe:2.3:a:todd_miller:sudo:1.6.7p1
Todd Miller » Sudo » Version: 1.6.7p2

cpe:2.3:a:todd_miller:sudo:1.6.7p2
Todd Miller » Sudo » Version: 1.6.7p3

cpe:2.3:a:todd_miller:sudo:1.6.7p3
Todd Miller » Sudo » Version: 1.6.7p4

cpe:2.3:a:todd_miller:sudo:1.6.7p4
Todd Miller » Sudo » Version: 1.6.7p5

cpe:2.3:a:todd_miller:sudo:1.6.7p5
Todd Miller » Sudo » Version: 1.6.8

cpe:2.3:a:todd_miller:sudo:1.6.8
Todd Miller » Sudo » Version: 1.6.8p1

cpe:2.3:a:todd_miller:sudo:1.6.8p1
Todd Miller » Sudo » Version: 1.6.8p10

cpe:2.3:a:todd_miller:sudo:1.6.8p10
Todd Miller » Sudo » Version: 1.6.8p11

cpe:2.3:a:todd_miller:sudo:1.6.8p11
Todd Miller » Sudo » Version: 1.6.8p12

cpe:2.3:a:todd_miller:sudo:1.6.8p12
Todd Miller » Sudo » Version: 1.6.8p2

cpe:2.3:a:todd_miller:sudo:1.6.8p2
Todd Miller » Sudo » Version: 1.6.8p3

cpe:2.3:a:todd_miller:sudo:1.6.8p3
Todd Miller » Sudo » Version: 1.6.8p4

cpe:2.3:a:todd_miller:sudo:1.6.8p4
Todd Miller » Sudo » Version: 1.6.8p5

cpe:2.3:a:todd_miller:sudo:1.6.8p5
Todd Miller » Sudo » Version: 1.6.8p6

cpe:2.3:a:todd_miller:sudo:1.6.8p6
Todd Miller » Sudo » Version: 1.6.8p7

cpe:2.3:a:todd_miller:sudo:1.6.8p7
Todd Miller » Sudo » Version: 1.6.8p8

cpe:2.3:a:todd_miller:sudo:1.6.8p8
Todd Miller » Sudo » Version: 1.6.8p9

cpe:2.3:a:todd_miller:sudo:1.6.8p9
Todd Miller » Sudo » Version: 1.6.9

cpe:2.3:a:todd_miller:sudo:1.6.9
Todd Miller » Sudo » Version: 1.6.9p1

cpe:2.3:a:todd_miller:sudo:1.6.9p1
Todd Miller » Sudo » Version: 1.6.9p10

cpe:2.3:a:todd_miller:sudo:1.6.9p10
Todd Miller » Sudo » Version: 1.6.9p11

cpe:2.3:a:todd_miller:sudo:1.6.9p11
Todd Miller » Sudo » Version: 1.6.9p12

cpe:2.3:a:todd_miller:sudo:1.6.9p12
Todd Miller » Sudo » Version: 1.6.9p13

cpe:2.3:a:todd_miller:sudo:1.6.9p13
Todd Miller » Sudo » Version: 1.6.9p14

cpe:2.3:a:todd_miller:sudo:1.6.9p14
Todd Miller » Sudo » Version: 1.6.9p15

cpe:2.3:a:todd_miller:sudo:1.6.9p15
Todd Miller » Sudo » Version: 1.6.9p16

cpe:2.3:a:todd_miller:sudo:1.6.9p16
Todd Miller » Sudo » Version: 1.6.9p17

cpe:2.3:a:todd_miller:sudo:1.6.9p17
Todd Miller » Sudo » Version: 1.6.9p18

cpe:2.3:a:todd_miller:sudo:1.6.9p18
Todd Miller » Sudo » Version: 1.6.9p19

cpe:2.3:a:todd_miller:sudo:1.6.9p19
Todd Miller » Sudo » Version: 1.6.9p2

cpe:2.3:a:todd_miller:sudo:1.6.9p2
Todd Miller » Sudo » Version: 1.6.9p20

cpe:2.3:a:todd_miller:sudo:1.6.9p20
Todd Miller » Sudo » Version: 1.6.9p21

cpe:2.3:a:todd_miller:sudo:1.6.9p21
Todd Miller » Sudo » Version: 1.6.9p22

cpe:2.3:a:todd_miller:sudo:1.6.9p22
Todd Miller » Sudo » Version: 1.6.9p3

cpe:2.3:a:todd_miller:sudo:1.6.9p3
Todd Miller » Sudo » Version: 1.6.9p4

cpe:2.3:a:todd_miller:sudo:1.6.9p4
Todd Miller » Sudo » Version: 1.6.9p5

cpe:2.3:a:todd_miller:sudo:1.6.9p5
Todd Miller » Sudo » Version: 1.6.9p6

cpe:2.3:a:todd_miller:sudo:1.6.9p6
Todd Miller » Sudo » Version: 1.6.9p7

cpe:2.3:a:todd_miller:sudo:1.6.9p7
Todd Miller » Sudo » Version: 1.6.9p8

cpe:2.3:a:todd_miller:sudo:1.6.9p8
Todd Miller » Sudo » Version: 1.6.9p9

cpe:2.3:a:todd_miller:sudo:1.6.9p9
Todd Miller » Sudo » Version: 1.7.0

cpe:2.3:a:todd_miller:sudo:1.7.0
Todd Miller » Sudo » Version: 1.7.1

cpe:2.3:a:todd_miller:sudo:1.7.1
Todd Miller » Sudo » Version: 1.7.2

cpe:2.3:a:todd_miller:sudo:1.7.2
Todd Miller » Sudo » Version: 1.7.2p1

cpe:2.3:a:todd_miller:sudo:1.7.2p1
Todd Miller » Sudo » Version: 1.7.2p2

cpe:2.3:a:todd_miller:sudo:1.7.2p2
Todd Miller » Sudo » Version: 1.7.2p3

cpe:2.3:a:todd_miller:sudo:1.7.2p3
Todd Miller » Sudo » Version: 1.7.2p4

cpe:2.3:a:todd_miller:sudo:1.7.2p4
Todd Miller » Sudo » Version: 1.7.2p5

cpe:2.3:a:todd_miller:sudo:1.7.2p5
Todd Miller » Sudo » Version: 1.7.2p6

cpe:2.3:a:todd_miller:sudo:1.7.2p6
Todd Miller » Sudo » Version: 1.7.2p7

cpe:2.3:a:todd_miller:sudo:1.7.2p7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-1646

Products

Pricing

Contact Us