Oval Definition:	oval:org.mitre.oval:def:13675
Revision Date: 2014-06-30 Version: 19 Title: USN-1046-1 -- sudo vulnerability Description: Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group Runas_Spec is not used in the default installation of Ubuntu. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2011-0010 USN-1046-1 USN-1046-1 Platform(s): Ubuntu 10.04 Ubuntu 10.10 Ubuntu 9.10 Product(s): sudo Definition Synopsis Release section Ubuntu 10.10 is installed AND Supported architectures section Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is amd64 OR Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.7.2p7-1ubuntu2.1 OR sudo DPKG is earlier than 1.7.2p7-1ubuntu2.1 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is amd64 OR Installed architecture is i386 OR Installed architecture is powerpc OR Installed architecture is sparc OR Installed architecture is armel OR Installed architecture is lpia AND Packages section sudo-ldap DPKG is earlier than 1.7.0-1ubuntu2.6 OR sudo DPKG is earlier than 1.7.0-1ubuntu2.6 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is amd64 OR Installed architecture is powerpc AND Packages section sudo-ldap DPKG is earlier than 1.7.2p1-1ubuntu5.3 OR sudo DPKG is earlier than 1.7.2p1-1ubuntu5.3
BACK