VDB

DEBIAN-CVE-2010-0427

DEBIAN-CVE-2010-0427 PUBLISHED

sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

Affected Products

VendorProductVersions
Debian:13sudo0, 0, 0
Debian:12sudo0, 0, 0
Debian:11sudo0, 0, 0
Debian:14sudo0, 0, 0

Timeline

  • Feb 25, 2010 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›