Todd Miller Sudo CVE-2014-9680 Local Security Bypass Vulnerability
BID:72649
Info
Todd Miller Sudo CVE-2014-9680 Local Security Bypass Vulnerability
| Bugtraq ID: | 72649 |
| Class: | Design Error |
| CVE: |
CVE-2014-9680 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 10 2015 12:00AM |
| Updated: | Jul 06 2016 12:25PM |
| Credit: | Jakub Wilk |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Todd Miller Sudo 1.8.3 Todd Miller Sudo 1.8.2 Todd Miller Sudo 1.8.1 Todd Miller Sudo 1.8 Todd Miller Sudo 1.7.2 p7 Todd Miller Sudo 1.7.2 p6 Todd Miller Sudo 1.7.2 p5 Todd Miller Sudo 1.7.2 p4 Todd Miller Sudo 1.7.2 p3 Todd Miller Sudo 1.7 Todd Miller Sudo 1.6.9 p19 Todd Miller Sudo 1.6.9 p18 Todd Miller Sudo 1.6.9 p17 Todd Miller Sudo 1.6.8 p9 Todd Miller Sudo 1.6.8 p8 Todd Miller Sudo 1.6.8 p7 Todd Miller Sudo 1.6.8 p5 Todd Miller Sudo 1.6.8 p4 Todd Miller Sudo 1.6.8 p2 Todd Miller Sudo 1.6.8 p12 Todd Miller Sudo 1.6.8 p1 Todd Miller Sudo 1.6.8 Todd Miller Sudo 1.6.7 p5 Todd Miller Sudo 1.6.7 Todd Miller Sudo 1.6.6 Todd Miller Sudo 1.6.5 p2 Todd Miller Sudo 1.6.5 p1 Todd Miller Sudo 1.6.5 Todd Miller Sudo 1.6.4 p2 Todd Miller Sudo 1.6.4 p1 Todd Miller Sudo 1.6.4 Todd Miller Sudo 1.6.3 p7 Todd Miller Sudo 1.6.3 p6 Todd Miller Sudo 1.6.3 p5 Todd Miller Sudo 1.6.3 p4 Todd Miller Sudo 1.6.3 p3 Todd Miller Sudo 1.6.3 p2 Todd Miller Sudo 1.6.3 p1 Todd Miller Sudo 1.6.3 Todd Miller Sudo 1.6.2 Todd Miller Sudo 1.6.1 Todd Miller Sudo 1.6 Todd Miller Sudo 1.5.9 Todd Miller Sudo 1.5.8 Todd Miller Sudo 1.5.7 Todd Miller Sudo 1.5.6 Todd Miller Sudo 1.8.4p5 Todd Miller Sudo 1.8.3p2 Todd Miller Sudo 1.8.3p1 Todd Miller Sudo 1.7.9p1 Todd Miller Sudo 1.7.4p4 Todd Miller Sudo 1.7.4p3 Todd Miller Sudo 1.6.9 p23 Todd Miller Sudo 1.6.9 p22 Todd Miller Sudo 1.6.9 p21 Todd Miller Sudo 1.6.9 p20 Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Todd Miller Sudo CVE-2014-9680 Local Security Bypass Vulnerability
Todd Miller 'sudo' is prone to a local security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Versions prior to sudo 1.8.12 are vulnerable.
Todd Miller 'sudo' is prone to a local security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Versions prior to sudo 1.8.12 are vulnerable.
Exploit / POC
Todd Miller Sudo CVE-2014-9680 Local Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Todd Miller Sudo CVE-2014-9680 Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.