CVE-2011-0010: todd_miller sudo

EPSS trend

Probability

0.50%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

0.00 pp

From 0.50% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

48 links

www.vupen.com/english/advisories/2011/0362VDB EntryX Refsource VUPEN
www.sudo.ws/sudo/alerts/runas_group_pw.htmlX Refsource CONFIRM
secunia.com/advisories/43068Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-201203-06.xmlVendor AdvisoryX Refsource GENTOO
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593654Vendor AdvisoryX Refsource SLACKWARE
www.mandriva.com/security/advisories?name=MDVSA-2011:018Vendor AdvisoryX Refsource MANDRIVA
www.sudo.ws/repos/sudo/rev/07d1b0ce530eX Refsource MISCPatch
www.vupen.com/english/advisories/2011/0089VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2011/0212VDB EntryX Refsource VUPEN
secunia.com/advisories/42949Third Party AdvisoryX Refsource SECUNIA

Show all 48 references

openwall.com/lists/oss-security/2011/01/11/3Mailing ListX Refsource MLISTPatch
www.vupen.com/english/advisories/2011/0182VDB EntryX Refsource VUPEN
lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2011/0199VDB EntryX Refsource VUPEN
www.ubuntu.com/usn/USN-1046-1Vendor AdvisoryX Refsource UBUNTU
www.redhat.com/support/errata/RHSA-2011-0599.htmlVendor AdvisoryX Refsource REDHAT
openwall.com/lists/oss-security/2011/01/12/1Mailing ListX Refsource MLISTPatch
www.osvdb.org/70400VDB EntryX Refsource OSVDB
secunia.com/advisories/42886Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/64636VDB EntryX Refsource XF
www.securityfocus.com/bid/45774VDB EntryX Refsource BID
openwall.com/lists/oss-security/2011/01/12/3Mailing ListX Refsource MLIST
secunia.com/advisories/43282Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.htmlVendor AdvisoryX Refsource FEDORA
www.sudo.ws/repos/sudo/rev/fe8a94f96542X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2011/0195VDB EntryX Refsource VUPEN
bugzilla.redhat.com/show_bug.cgi?id=668879X Refsource CONFIRMPatchREPORT
bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641X Refsource CONFIRM
secunia.com/advisories/42968Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2011:0599Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=603823REPORT
bugzilla.redhat.com/show_bug.cgi?id=615087REPORT
bugzilla.redhat.com/show_bug.cgi?id=634159REPORT
bugzilla.redhat.com/show_bug.cgi?id=688640REPORT
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0599.jsonAdvisory
access.redhat.com/security/cve/CVE-2011-0010REPORT
www.cve.org/CVERecord?id=CVE-2011-0010Advisory
nvd.nist.gov/vuln/detail/CVE-2011-0010Advisory
access.redhat.com/errata/RHSA-2012:0309Advisory
bugzilla.redhat.com/show_bug.cgi?id=477185REPORT
bugzilla.redhat.com/show_bug.cgi?id=627543REPORT
bugzilla.redhat.com/show_bug.cgi?id=673072REPORT
bugzilla.redhat.com/show_bug.cgi?id=673157REPORT
bugzilla.redhat.com/show_bug.cgi?id=697111REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0309.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2011-0010Advisory

Related vulnerabilities

CVE-2013-2777applemac_os_x+20.36%13y ago08-04-2013 17:00sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-2776applemac_os_x+20.37%13y ago08-04-2013 17:00sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-1776applemac_os_x+50.37%13y ago08-04-2013 17:00sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.CVE-2013-1775applemac_os_x+23.18%13y ago04-03-2013 21:00sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.CVE-2014-0106applemac_os_x+40.34%12y ago11-03-2014 15:00Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.CVE-2005-1119debiansudo+10.36%21y ago16-04-2005 04:00Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

All vulnerabilities insudo

CVE-2011-0010: todd_miller sudo

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References