CVE-2011-0008

First published: Tue Jan 11 2011(Updated: )

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.

Credit: secalert@redhat.com secalert@redhat.com

Affected Software	Affected Version	How to fix
Todd Miller Sudo	<=1.7.4p5
Todd Miller Sudo	=1.3.1
Todd Miller Sudo	=1.5
Todd Miller Sudo	=1.5.2
Todd Miller Sudo	=1.5.3
Todd Miller Sudo	=1.5.6
Todd Miller Sudo	=1.5.7
Todd Miller Sudo	=1.5.8
Todd Miller Sudo	=1.5.9
Todd Miller Sudo	=1.6
Todd Miller Sudo	=1.6.1
Todd Miller Sudo	=1.6.2
Todd Miller Sudo	=1.6.2p1
Todd Miller Sudo	=1.6.2p2
Todd Miller Sudo	=1.6.2p3
Todd Miller Sudo	=1.6.3
Todd Miller Sudo	=1.6.3_p1
Todd Miller Sudo	=1.6.3_p2
Todd Miller Sudo	=1.6.3_p3
Todd Miller Sudo	=1.6.3_p4
Todd Miller Sudo	=1.6.3_p5
Todd Miller Sudo	=1.6.3_p6
Todd Miller Sudo	=1.6.3_p7
Todd Miller Sudo	=1.6.3p1
Todd Miller Sudo	=1.6.3p2
Todd Miller Sudo	=1.6.3p3
Todd Miller Sudo	=1.6.3p4
Todd Miller Sudo	=1.6.3p5
Todd Miller Sudo	=1.6.3p6
Todd Miller Sudo	=1.6.3p7
Todd Miller Sudo	=1.6.4
Todd Miller Sudo	=1.6.4_p1
Todd Miller Sudo	=1.6.4_p2
Todd Miller Sudo	=1.6.4p1
Todd Miller Sudo	=1.6.4p2
Todd Miller Sudo	=1.6.5
Todd Miller Sudo	=1.6.5_p1
Todd Miller Sudo	=1.6.5_p2
Todd Miller Sudo	=1.6.5p1
Todd Miller Sudo	=1.6.5p2
Todd Miller Sudo	=1.6.6
Todd Miller Sudo	=1.6.7
Todd Miller Sudo	=1.6.7_p5
Todd Miller Sudo	=1.6.7p1
Todd Miller Sudo	=1.6.7p2
Todd Miller Sudo	=1.6.7p3
Todd Miller Sudo	=1.6.7p4
Todd Miller Sudo	=1.6.7p5
Todd Miller Sudo	=1.6.8
Todd Miller Sudo	=1.6.8_p1
Todd Miller Sudo	=1.6.8_p2
Todd Miller Sudo	=1.6.8_p5
Todd Miller Sudo	=1.6.8_p7
Todd Miller Sudo	=1.6.8_p8
Todd Miller Sudo	=1.6.8_p9
Todd Miller Sudo	=1.6.8_p12
Todd Miller Sudo	=1.6.8p1
Todd Miller Sudo	=1.6.8p2
Todd Miller Sudo	=1.6.8p3
Todd Miller Sudo	=1.6.8p4
Todd Miller Sudo	=1.6.8p5
Todd Miller Sudo	=1.6.8p6
Todd Miller Sudo	=1.6.8p7
Todd Miller Sudo	=1.6.8p8
Todd Miller Sudo	=1.6.8p9
Todd Miller Sudo	=1.6.8p10
Todd Miller Sudo	=1.6.8p11
Todd Miller Sudo	=1.6.8p12
Todd Miller Sudo	=1.6.9
Todd Miller Sudo	=1.6.9_p17
Todd Miller Sudo	=1.6.9_p18
Todd Miller Sudo	=1.6.9_p19
Todd Miller Sudo	=1.6.9_p20
Todd Miller Sudo	=1.6.9_p21
Todd Miller Sudo	=1.6.9_p22
Todd Miller Sudo	=1.6.9p1
Todd Miller Sudo	=1.6.9p2
Todd Miller Sudo	=1.6.9p3
Todd Miller Sudo	=1.6.9p4
Todd Miller Sudo	=1.6.9p5
Todd Miller Sudo	=1.6.9p6
Todd Miller Sudo	=1.6.9p7
Todd Miller Sudo	=1.6.9p8
Todd Miller Sudo	=1.6.9p9
Todd Miller Sudo	=1.6.9p10
Todd Miller Sudo	=1.6.9p11
Todd Miller Sudo	=1.6.9p12
Todd Miller Sudo	=1.6.9p13
Todd Miller Sudo	=1.6.9p14
Todd Miller Sudo	=1.6.9p15
Todd Miller Sudo	=1.6.9p16
Todd Miller Sudo	=1.6.9p17
Todd Miller Sudo	=1.6.9p18
Todd Miller Sudo	=1.6.9p19
Todd Miller Sudo	=1.6.9p20
Todd Miller Sudo	=1.6.9p21
Todd Miller Sudo	=1.6.9p22
Todd Miller Sudo	=1.6.9p23
Todd Miller Sudo	=1.7.0
Todd Miller Sudo	=1.7.1
Todd Miller Sudo	=1.7.2
Todd Miller Sudo	=1.7.2p1
Todd Miller Sudo	=1.7.2p2
Todd Miller Sudo	=1.7.2p3
Todd Miller Sudo	=1.7.2p4
Todd Miller Sudo	=1.7.2p5
Todd Miller Sudo	=1.7.2p6
Todd Miller Sudo	=1.7.2p7
Todd Miller Sudo	=1.7.3b1
Todd Miller Sudo	=1.7.4
Todd Miller Sudo	=1.7.4p1
Todd Miller Sudo	=1.7.4p2
Todd Miller Sudo	=1.7.4p3
Todd Miller Sudo	=1.7.4p4
Redhat Fedora	=14

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=668843

Never miss a vulnerability like this again

Reference Links

collector/nvd-historical
collector/nvd-index
collector/nvd-api
agent/references
agent/author
agent/type
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2011-0008
agent/remedy
agent/severity
agent/last-modified-date
agent/weakness
agent/tags
agent/description
agent/event
vendor/todd miller
canonical/todd miller sudo
version/todd miller sudo/1.7.4p5
version/todd miller sudo/1.3.1
version/todd miller sudo/1.5
version/todd miller sudo/1.5.2
version/todd miller sudo/1.5.3
version/todd miller sudo/1.5.6
version/todd miller sudo/1.5.7
version/todd miller sudo/1.5.8
version/todd miller sudo/1.5.9
version/todd miller sudo/1.6
version/todd miller sudo/1.6.1
version/todd miller sudo/1.6.2
version/todd miller sudo/1.6.2p1
version/todd miller sudo/1.6.2p2
version/todd miller sudo/1.6.2p3
version/todd miller sudo/1.6.3
version/todd miller sudo/1.6.3_p1
version/todd miller sudo/1.6.3_p2
version/todd miller sudo/1.6.3_p3
version/todd miller sudo/1.6.3_p4
version/todd miller sudo/1.6.3_p5
version/todd miller sudo/1.6.3_p6
version/todd miller sudo/1.6.3_p7
version/todd miller sudo/1.6.3p1
version/todd miller sudo/1.6.3p2
version/todd miller sudo/1.6.3p3
version/todd miller sudo/1.6.3p4
version/todd miller sudo/1.6.3p5
version/todd miller sudo/1.6.3p6
version/todd miller sudo/1.6.3p7
version/todd miller sudo/1.6.4
version/todd miller sudo/1.6.4_p1
version/todd miller sudo/1.6.4_p2
version/todd miller sudo/1.6.4p1
version/todd miller sudo/1.6.4p2
version/todd miller sudo/1.6.5
version/todd miller sudo/1.6.5_p1
version/todd miller sudo/1.6.5_p2
version/todd miller sudo/1.6.5p1
version/todd miller sudo/1.6.5p2
version/todd miller sudo/1.6.6
version/todd miller sudo/1.6.7
version/todd miller sudo/1.6.7_p5
version/todd miller sudo/1.6.7p1
version/todd miller sudo/1.6.7p2
version/todd miller sudo/1.6.7p3
version/todd miller sudo/1.6.7p4
version/todd miller sudo/1.6.7p5
version/todd miller sudo/1.6.8
version/todd miller sudo/1.6.8_p1
version/todd miller sudo/1.6.8_p2
version/todd miller sudo/1.6.8_p5
version/todd miller sudo/1.6.8_p7
version/todd miller sudo/1.6.8_p8
version/todd miller sudo/1.6.8_p9
version/todd miller sudo/1.6.8_p12
version/todd miller sudo/1.6.8p1
version/todd miller sudo/1.6.8p2
version/todd miller sudo/1.6.8p3
version/todd miller sudo/1.6.8p4
version/todd miller sudo/1.6.8p5
version/todd miller sudo/1.6.8p6
version/todd miller sudo/1.6.8p7
version/todd miller sudo/1.6.8p8
version/todd miller sudo/1.6.8p9
version/todd miller sudo/1.6.8p10
version/todd miller sudo/1.6.8p11
version/todd miller sudo/1.6.8p12
version/todd miller sudo/1.6.9
version/todd miller sudo/1.6.9_p17
version/todd miller sudo/1.6.9_p18
version/todd miller sudo/1.6.9_p19
version/todd miller sudo/1.6.9_p20
version/todd miller sudo/1.6.9_p21
version/todd miller sudo/1.6.9_p22
version/todd miller sudo/1.6.9p1
version/todd miller sudo/1.6.9p2
version/todd miller sudo/1.6.9p3
version/todd miller sudo/1.6.9p4
version/todd miller sudo/1.6.9p5
version/todd miller sudo/1.6.9p6
version/todd miller sudo/1.6.9p7
version/todd miller sudo/1.6.9p8
version/todd miller sudo/1.6.9p9
version/todd miller sudo/1.6.9p10
version/todd miller sudo/1.6.9p11
version/todd miller sudo/1.6.9p12
version/todd miller sudo/1.6.9p13
version/todd miller sudo/1.6.9p14
version/todd miller sudo/1.6.9p15
version/todd miller sudo/1.6.9p16
version/todd miller sudo/1.6.9p17
version/todd miller sudo/1.6.9p18
version/todd miller sudo/1.6.9p19
version/todd miller sudo/1.6.9p20
version/todd miller sudo/1.6.9p21
version/todd miller sudo/1.6.9p22
version/todd miller sudo/1.6.9p23
version/todd miller sudo/1.7.0
version/todd miller sudo/1.7.1
version/todd miller sudo/1.7.2
version/todd miller sudo/1.7.2p1
version/todd miller sudo/1.7.2p2
version/todd miller sudo/1.7.2p3
version/todd miller sudo/1.7.2p4
version/todd miller sudo/1.7.2p5
version/todd miller sudo/1.7.2p6
version/todd miller sudo/1.7.2p7
version/todd miller sudo/1.7.3b1
version/todd miller sudo/1.7.4
version/todd miller sudo/1.7.4p1
version/todd miller sudo/1.7.4p2
version/todd miller sudo/1.7.4p3
version/todd miller sudo/1.7.4p4
vendor/redhat
canonical/redhat fedora
version/redhat fedora/14

CVE-2011-0008

Remedy

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact