CVE-2013-1775 Security feature bypass in n/a

Medium 6.9 Published 4 Mar 2013 Updated 6 Aug 2024

Local attackers can bypass sudo time restrictions by manipulating the system clock to retain privileges without re-authentication.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2013-1775?

CVE-2013-1775 is a medium-severity vulnerability in Apple Mac Os X, published on 4 Mar 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

Weakness: CWE-264

Which versions are affected by CVE-2013-1775?

It affects 2 products.

Products include Apple Mac Os X, Todd Miller Sudo.

How do I fix CVE-2013-1775?

Upgrade to a fixed version.

Is CVE-2013-1775 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-1775 exists.

Public exploit code: 1 Metasploit module, 2 Exploit-DB entries and 1 proofs of concept on GitHub.

All Apple Mac Os X vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-1775, GHSA-3f5j-4h2q-jfx9.