Unrated severityNVD Advisory· Published Sep 10, 2010· Updated Jun 16, 2026
CVE-2010-2956
CVE-2010-2956
Description
Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:*
- cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:*
- Range: 1.7.0 - 1.7.4p3
Patches
Vulnerability mechanics
References
22- secunia.com/advisories/40508nvdVendor Advisory
- secunia.com/advisories/41316nvdVendor Advisory
- www.sudo.ws/sudo/alerts/runas_group.htmlnvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlnvd
- secunia.com/advisories/42787nvd
- security.gentoo.org/glsa/glsa-201009-03.xmlnvd
- wiki.rpath.com/Advisories:rPSA-2010-0075nvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2010-0675.htmlnvd
- www.securityfocus.com/archive/1/514489/100/0/threadednvd
- www.securityfocus.com/archive/1/515545/100/0/threadednvd
- www.securityfocus.com/bid/43019nvd
- www.securitytracker.com/idnvd
- www.ubuntu.com/usn/USN-983-1nvd
- www.vmware.com/security/advisories/VMSA-2011-0001.htmlnvd
- www.vupen.com/english/advisories/2010/2312nvd
- www.vupen.com/english/advisories/2010/2318nvd
- www.vupen.com/english/advisories/2010/2320nvd
- www.vupen.com/english/advisories/2010/2358nvd
- www.vupen.com/english/advisories/2011/0025nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.