GCVE - cpe:2.3:a:todd_miller:sudo:1.3.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:todd_miller:sudo:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

Vendor	Todd Miller (`6e64c61d-ae67-5a3c-a0c7-5a9c304d6f92`)
Product	Sudo (`ffec71ae-72fb-5429-b6f7-5160d870c451`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/millert/sudo`	purl2cpe	2026-06-01 10:15:50.034495
`pkg:deb/debian/sudo`	purl2cpe	2026-06-01 10:15:50.034497
`pkg:deb/ubuntu/sudo`	purl2cpe	2026-06-01 10:15:50.034499
`pkg:github/millert/sudo`	purl2cpe	2026-06-01 10:15:50.034501
`pkg:github/sudo-project/sudo`	purl2cpe	2026-06-01 10:15:50.034503
`pkg:gitlab/redhat/sudo`	purl2cpe	2026-06-01 10:15:50.034504
`pkg:rpm/fedora/sudo`	purl2cpe	2026-06-01 10:15:50.034506
`pkg:rpm/opensuse/sudo`	purl2cpe	2026-06-01 10:15:50.034508

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0008`	vulnerable	2026-06-08 04:56:32.974110	Details available A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. Published: 2011-01-20T18:00:00.000Z Updated: 2024-08-06T21:36:02.454Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:018 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html http://www.vupen.com/english/advisories/2011/0199 https://bugzilla.redhat.com/show_bug.cgi?id=668843 https://exchange.xforce.ibmcloud.com/vulnerabilities/64965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1646`	vulnerable	2026-06-08 04:54:09.635943	Details available The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable. Published: 2010-06-07T14:00:00.000Z Updated: 2024-08-07T01:28:41.583Z Open on db.gcve.eu Reference links http://www.osvdb.org/65083 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html http://secunia.com/advisories/43068 http://www.sudo.ws/sudo/alerts/secure_path.html http://www.sudo.ws/repos/sudo/rev/3057fde43cf0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1993`	vulnerable	2026-06-08 04:48:28.033886	Details available Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. Published: 2005-06-20T04:00:00.000Z Updated: 2024-08-07T22:06:57.904Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341 http://www.securityfocus.com/archive/1/402741 http://secunia.com/advisories/17813 http://www.vupen.com/english/advisories/2005/2659 http://www.debian.org/security/2005/dsa-735	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Sudo

Notes

PURL mappings

Vulnerability references

Contribute