The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2010-06-07T14:00:00
Updated: 2018-10-10T18:57:01
Reserved: 2010-04-29T00:00:00
Link: CVE-2010-1646
JSON object: View
NVD Information
Status : Modified
Published: 2010-06-07T17:12:48.123
Modified: 2018-10-10T19:57:42.763
Link: CVE-2010-1646
JSON object: View
Redhat Information
No data.
CWE