Description
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | sudo | 1.7.2p6-1 | — |
| Debian 13 | sudo | 1.7.2p6-1 | — |
| Debian 12 | sudo | 1.7.2p6-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | sudo | 1.7.2p1-6.el5_5 | RHSA-2010:0361 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | sudo | 1.8.18p1-1.1 | openSUSE-SU-2024:10551-1 |
Advisories 2
- RHSA-2010:0361 Red Hat Security Advisory: sudo security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10551-1 sudo-1.8.18p1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- USN-928-1 vendor-advisory
- 43068 third-party-advisory
- RHSA-2010:0361 vendor-advisory
- ADV-2011-0212 vdb-entry
- 39384 third-party-advisory
- oval:org.mitre.oval:def:9382 vdb-entry signature
- 39543 third-party-advisory
- 39399 third-party-advisory
- ADV-2010-1019 vdb-entry
- 63878 vdb-entry
- ADV-2010-0956 vdb-entry
- 20100422 Re: sudoedit local privilege escalation through PATH manipulation mailing-list
- 20101027 rPSA-2010-0075-1 sudo mailing-list
- MDVSA-2010:078 vendor-advisory
- FEDORA-2010-6756 vendor-advisory
- ADV-2010-0895 vdb-entry
- SUSE-SR:2011:002 vendor-advisory
- ADV-2010-0949 vdb-entry
- http://wiki.rpath.com/Advisories:rPSA-2010-0075
- 20100419 sudoedit local privilege escalation through PATH manipulation mailing-list
- 39468 vdb-entry
- ADV-2010-0881 vdb-entry
- 39474 third-party-advisory
- 20100420 Re: sudoedit local privilege escalation through PATH manipulation mailing-list
- http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html
- sudo-sudoefit-privilege-escalation(57836) vdb-entry
- ADV-2010-0904 vdb-entry
- SSA:2010-110-01 vendor-advisory