Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Scientific Linux: 2010-06-15 Moderate: Sudo Security Patch for SL5.x

Calendar Jun 16, 2010 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate security update sudo local user Scientific Linux environment variables
Moderate: sudo security update 
Date: Wed, 16 Jun 2010 11:27:35 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: sudo on SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: sudo security update
Issue date:	2010-06-15
CVE Names:	CVE-2010-1646

A flaw was found in the way sudo handled the presence of duplicated
environment variables. A local user authorized to run commands using
sudo could use this flaw to set additional values for the environment
variables set by sudo, which could result in those values being used by
the executed command instead of the values set by sudo. This could
possibly lead to certain intended restrictions being bypassed, such as
the secure_path setting. (CVE-2010-1646)

SL 5.x

 SRPMS:
sudo-1.7.2p1-7.el5_5.src.rpm
 i386:
sudo-1.7.2p1-7.el5_5.i386.rpm
 x86_64:
sudo-1.7.2p1-7.el5_5.x86_64.rpm

-Connie Sieh
-Troy Dawson