oval:org.mitre.oval:def:23082
| Definition Id: oval:org.mitre.oval:def:23082 | |||
| Oval ID: | oval:org.mitre.oval:def:23082 | ||
| Title: | ELSA-2010:0361: sudo security update (Moderate) | ||
| Description: | The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2010:0361-01 CVE-2010-1163 | Version: | 6 |
| Platform(s): | Oracle Linux 5 | Product(s): | sudo |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:15459 | |||
| Oval ID: | oval:org.mitre.oval:def:15459 | ||
| Title: | Oracle Linux 5.x | ||
| Description: | The operating system installed on the system is Oracle Linux 5.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:oracle:linux:5 | Version: | 7 |
| Platform(s): | Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:23082 | |||
