CVE-2013-1775
Fixed in a distro release EPSS 3%
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Products: todd_miller sudo, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sudo | 1.8.5p2-1+nmu1 |
| Debian 13 | sudo | 1.8.5p2-1+nmu1 |
| Debian 14 | sudo | 1.8.5p2-1+nmu1 |
| Debian 6.0 | sudo | 1.7.4p4-2.squeeze.4 |
| Red Hat Enterprise Linux 5 | sudo | 0:1.7.2p1-28.el5 |
| Red Hat Enterprise Linux 5 | sudo-debuginfo | 0:1.7.2p1-28.el5 |
| Red Hat Enterprise Linux 6 | sudo | 0:1.8.6p3-12.el6 |
| Red Hat Enterprise Linux 6 | sudo-debuginfo | 0:1.8.6p3-12.el6 |
| Red Hat Enterprise Linux 6 | sudo-devel | 0:1.8.6p3-12.el6 |
| openSUSE Tumbleweed | sudo | 1.8.18p1-1.1 |