Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2010-09-10T18:00:00
Updated: 2018-10-10T18:57:01
Reserved: 2010-08-04T00:00:00
Link: CVE-2010-2956
JSON object: View
NVD Information
Status : Modified
Published: 2010-09-10T19:00:02.830
Modified: 2018-10-10T20:00:38.157
Link: CVE-2010-2956
JSON object: View
Redhat Information
No data.
CWE