CVE-2010-1646 Privilege escalation in n/a
Local attackers can gain elevated privileges by exploiting improper handling of multiple PATH variables in the sudo secure path feature.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-1646?
CVE-2010-1646 is a medium-severity vulnerability in n/a, published on 7 Jun 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
Weakness: CWE-264
Which versions are affected by CVE-2010-1646?
It affects 1 product.
Linux distribution packages (4)
sudo Red Hat:enterprise_linux:5::client | All versions | 0:1.7.2p1-7.el5_5 |
sudo-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:1.7.2p1-7.el5_5 |
sudo Red Hat:enterprise_linux:5::server | All versions | 0:1.7.2p1-7.el5_5 |
sudo-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:1.7.2p1-7.el5_5 |
Products include Todd Miller Sudo.
How do I fix CVE-2010-1646?
Upgrade to a fixed version.
Is CVE-2010-1646 being exploited?
There is no known exploitation of CVE-2010-1646 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2010-1646, DSA-2062-1, GHSA-xww5-hh94-wcq9, RHSA-2010:0475.