CVE-2010-1163
Fixed in a distro release EPSS <1%
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
Products: todd_miller sudo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sudo | 1.7.2p6-1 |
| Debian 13 | sudo | 1.7.2p6-1 |
| Debian 14 | sudo | 1.7.2p6-1 |
| Red Hat Enterprise Linux 5 | sudo | 0:1.7.2p1-6.el5_5 |
| Red Hat Enterprise Linux 5 | sudo-debuginfo | 0:1.7.2p1-6.el5_5 |
| openSUSE Tumbleweed | sudo | 1.8.18p1-1.1 |