Executive Summary

Summary
Titlesudo security update
Informations
NameRHSA-2005:535First vendor Publication2005-06-29
VendorRedHatLast vendor Modification2005-06-29
Severity (Vendor) ModerateRevision04

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:H/Au:N/C:P/I:P/A:P)
Cvss Base Score3.7Attack RangeLocal
Cvss Impact Score6.4Attack ComplexityHigh
Cvss Expoit Score1.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

An updated sudo package is available that fixes a race condition in sudo's
pathname validation.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Problem description:

The sudo (superuser do) utility allows system administrators to give
certain users the ability to run commands as root with logging.

A race condition bug was found in the way sudo handles pathnames. It is
possible that a local user with limited sudo access could create
a race condition that would allow the execution of arbitrary commands as
the root user. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-1993 to this issue.

Users of sudo should update to this updated package, which contains a
backported patch and is not vulnerable to this issue.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

5. Bug IDs fixed (http://bugzilla.redhat.com/):

161116 - CAN-2005-1993 sudo trusted user arbitrary command execution


Original Source

Url : https://rhn.redhat.com/errata/RHSA-2005-535.html

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:1242
 
Oval ID: oval:org.mitre.oval:def:1242
Title: sudo Symlink Vulnerability
Description: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Family: unix Class: vulnerability
Reference(s): CVE-2005-1993
Version: 1
Platform(s): Red Hat Enterprise Linux 3
Product(s): sudo
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:11341
 
Oval ID: oval:org.mitre.oval:def:11341
Title: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Description: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Family: unix Class: vulnerability
Reference(s): CVE-2005-1993
Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application29

OpenVAS Exploits

DateDescription
2009-11-17Name : Mac OS X Version
File : nvt/macosx_version.nasl
2009-10-10Name : SLES9: Security update for sudo
File : nvt/sles9p5019263.nasl
2008-09-04Name : FreeBSD Ports: sudo
File : nvt/freebsd_sudo2.nasl
2008-01-17Name : Debian Security Advisory DSA 735-1 (sudo)
File : nvt/deb_735_1.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
17396Sudo sudoers ALL Entry Race Condition

Nessus® Vulnerability Scanner

DateDescription
2012-01-12Name : The remote Debian host is missing a security-related update.
File : debian_DSA-773.nasl - Type : ACT_GATHER_INFO
2006-07-03Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2005-535.nasl - Type : ACT_GATHER_INFO
2006-01-15Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-142-1.nasl - Type : ACT_GATHER_INFO
2005-11-30Name : The remote operating system is missing a vendor-supplied patch.
File : macosx_SecUpd2005-009.nasl - Type : ACT_GATHER_INFO
2005-07-13Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_3bf157fae1c611d9b8750001020eed82.nasl - Type : ACT_GATHER_INFO
2005-07-05Name : The remote Debian host is missing a security-related update.
File : debian_DSA-735.nasl - Type : ACT_GATHER_INFO
2005-06-29Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2005-535.nasl - Type : ACT_GATHER_INFO
2005-06-28Name : The remote Fedora Core host is missing a security update.
File : fedora_2005-473.nasl - Type : ACT_GATHER_INFO
2005-06-23Name : The remote Mandrake Linux host is missing a security update.
File : mandrake_MDKSA-2005-103.nasl - Type : ACT_GATHER_INFO
2005-06-22Name : The remote Fedora Core host is missing a security update.
File : fedora_2005-472.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2014-02-17 11:49:29
  • Multiple Updates