CVE-2010-1163: Input Validation
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1163?
CVE-2010-1163 is considered to be of high severity due to its ability to allow local users to execute arbitrary commands.
How do I fix CVE-2010-1163?
To fix CVE-2010-1163, update your sudo version to any version later than 1.7.2p5 that is free from this vulnerability.
Which versions of sudo are affected by CVE-2010-1163?
CVE-2010-1163 affects sudo versions from 1.6.8 to 1.7.2p5.
How does CVE-2010-1163 exploit work?
CVE-2010-1163 exploits the command matching functionality by allowing a file in the current directory to shadow pseudo-commands in the sudoers file.
Can I mitigate the risks of CVE-2010-1163 without updating?
While updating is the best option, you can mitigate risks by avoiding the use of '.' in the PATH environment variable.