Pardus alert 2010-70 (sudo)

From:
    	     
 
Eren Turkay <eren@pardus.org.tr> 
To:
    	     
 
pardus-security@pardus.org.tr 
Subject:
    	     
 
[Pardus-security] [PLSA 2010-70] Sudo: Privilege Escalation 
Date:
    	     
 
Fri,  4 Jun 2010 11:06:06 +0300 (EEST)
Message-ID:
    	     
 
<20100604080606.1F599A7AB85@lider.pardus.org.tr>

------------------------------------------------------------------------
Pardus Linux Security Advisory 2010-70            security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2010-06-04
  Severity: 3
      Type: Remote
------------------------------------------------------------------------

Summary
=======

A flaw was fixed in sudo's -e option (aka sudoedit)  in  sudo  versions 
1.6.8 through 1.7.2p5 that may give  a  user  with  permission  to  run 
sudoedit the ability to run arbitrary commands. This bug is related to, 
but distinct from, CVE 2010-0426. 


Description
===========

The command matching functionality in sudo 1.6.8 through  1.7.2p5  does 
not properly handle when a file in the current working directory has the
same name as a pseudo-command in the sudoers file and the PATH contains 
an entry for ".", which allows local users to execute arbitrary commands
via a Trojan  horse  executable,  as  demonstrated  using  sudoedit,  a 
different vulnerability than CVE-2010-0426. 


Affected packages:

  Pardus 2009:
    sudo, all before 1.7.2_p6-26-7


Resolution
==========

There are update(s) for sudo. You can update them via Package Manager or
with a single command from console: 

    pisi up sudo

References
==========

  * http://bugs.pardus.org.tr/show_bug.cgi?id=12829

------------------------------------------------------------------------

_______________________________________________
Pardus-security mailing list
Pardus-security@pardus.org.tr
http://liste.pardus.org.tr/mailman/listinfo/pardus-security