Security Advisory

CVE-2010-0427

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-02-25 19:00:00
Last updated 2024-08-07 00:45:12
Assigner redhat
State PUBLISHED

Description

sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.