CVE-2013-1775: Medium severity sudo vulnerability
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1775?
CVE-2013-1775 has been rated as a moderate severity vulnerability due to its potential for privilege escalation by local attackers.
How do I fix CVE-2013-1775?
To fix CVE-2013-1775, update to a patched version of sudo, specifically versions 1.7.10p7 or higher, or 1.8.7 or higher.
Who is affected by CVE-2013-1775?
CVE-2013-1775 affects local users or physically proximate attackers using affected versions of sudo from 1.6.0 to 1.8.6p6.
What is the impact of CVE-2013-1775?
The impact of CVE-2013-1775 allows attackers to bypass time restrictions on sudo and retain elevated privileges without re-authenticating.
Is there a workaround for CVE-2013-1775?
A temporary workaround for CVE-2013-1775 involves disabling the use of timestamps in sudo by setting 'timestamp_timeout=0' in the sudoers file.