Vulnerability CVE-2014-0106

Vulnerability Name:

CVE-2014-0106 (CCN-91613)

Assigned:

2013-12-03

Published:

2014-03-05

Updated:

2017-12-16

Summary:

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.6 Medium (CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C)
4.9 Medium (Temporal CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.6 Medium (REDHAT CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C)
4.9 Medium (REDHAT Temporal CVSS v2 Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2014-0106

Source: APPLE
Type: UNKNOWN
APPLE-SA-2015-08-13-2

Source: SUSE
Type: UNKNOWN
SUSE-SU-2014:0475

Source: CCN
Type: RHSA-2014-0266
Moderate: sudo security update

Source: REDHAT
Type: UNKNOWN
RHSA-2014:0266

Source: CCN
Type: oss-security: Wed, 05 Mar 2014
sudo: security policy bypass when env_reset is disabled

Source: MLIST
Type: UNKNOWN
[oss-security] 20140305 sudo: security policy bypass when env_reset is disabled

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: BID
Type: UNKNOWN
65997

Source: CCN
Type: BID-65997
Todd Miller Sudo 'validate_env_vars()' Local Privilege Escalation Vulnerability

Source: CCN
Type: sudo Web site
sudo Main Page

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.sudo.ws/sudo/alerts/env_add.html

Source: UBUNTU
Type: UNKNOWN
USN-2146-1

Source: XF
Type: UNKNOWN
sudo-cve20140106-priv-esc(91613)

Source: CONFIRM
Type: Vendor Advisory
https://support.apple.com/kb/HT205031

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-0106

Vulnerable Configuration:

Configuration 1:

cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version <= 10.10.4)

Configuration 2:

cpe:/a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.6.9p23:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p5:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.4p6:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.6p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.6p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.8p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.8p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.9p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p3:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p5:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p6:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p7:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p8:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p9:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.7.10p10:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.3p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p1:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p2:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p3:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p4:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration CCN 1:

cpe:/a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*

OR cpe:/a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20140106	V	CVE-2014-0106	2022-05-20
oval:org.opensuse.security:def:32220	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:34573	P	Security update for ncurses (Moderate)	2021-10-20
oval:org.opensuse.security:def:55955	P	Security update for libqt5-qtbase (Important)	2021-09-30
oval:org.opensuse.security:def:26134	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:56067	P	Security update for Mesa (Moderate)	2021-09-16
oval:org.opensuse.security:def:57498	P	Security update for bind (Moderate)	2021-08-30
oval:org.opensuse.security:def:34484	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:30099	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:32133	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:36300	P	sudo-1.7.6p2-0.23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:30088	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:56029	P	Security update for MozillaFirefox (Important)	2021-06-08
oval:org.opensuse.security:def:30087	P	Security update for libX11 (Important)	2021-06-08
oval:org.opensuse.security:def:42707	P	sudo-1.7.6p2-0.23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:55198	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:26053	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:34427	P	Security update for libxml2 (Moderate)	2021-05-05
oval:org.opensuse.security:def:32076	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)	2021-04-28
oval:org.opensuse.security:def:30173	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP2) (Important)	2021-04-12
oval:org.opensuse.security:def:54787	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:55304	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:26191	P	Security update for jasper (Important)	2021-02-16
oval:org.opensuse.security:def:55863	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:35586	P	libexiv2-4-0.17.1-31.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35627	P	perl-32bit-5.10.0-64.47.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:26625	P	pam_ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27386	P	cyrus-imapd-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34878	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:25849	P	Security update for mariadb (Important)	2020-12-01
oval:org.opensuse.security:def:30394	P	Security update for Xen and libvirt	2020-12-01
oval:org.opensuse.security:def:32481	P	NetworkManager on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27589	P	xorg-x11-libxcb-devel-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25925	P	Security update for pcre (Moderate)	2020-12-01
oval:org.opensuse.security:def:30692	P	Security update for MozillaFirefox (Critical)	2020-12-01
oval:org.opensuse.security:def:32586	P	openswan on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34098	P	Security update to ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:27812	P	Security update for LibreOffice	2020-12-01
oval:org.opensuse.security:def:31766	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:30835	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:34329	P	Security update for sane-backends (Moderate)	2020-12-01
oval:org.opensuse.security:def:28065	P	Security update for expat (Moderate)	2020-12-01
oval:org.opensuse.security:def:31852	P	Recommended udpate for SUSE Manager Client Tools (Low)	2020-12-01
oval:org.opensuse.security:def:26479	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:31537	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:54647	P	pcsc-ccid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28162	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26581	P	libadns1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27385	P	cvs-doc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34839	P	Security update for bind (Critical)	2020-12-01
oval:org.opensuse.security:def:30305	P	Security update for system-config-printer (Moderate)	2020-12-01
oval:org.opensuse.security:def:32432	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:27298	P	sudo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27461	P	libmspack-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55755	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:34948	P	Security update for MozillaFirefox, firefox-glib2, firefox-gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:25861	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:30537	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32542	P	kvm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34097	P	Security update for microcode_ctl (Important)	2020-12-01
oval:org.opensuse.security:def:27728	P	Security update for file	2020-12-01
oval:org.opensuse.security:def:30796	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:33263	P	sudo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34193	P	Security update for pam-modules (Moderate)	2020-12-01
oval:org.opensuse.security:def:28016	P	Security update for augeas (Moderate)	2020-12-01
oval:org.opensuse.security:def:57424	P	Security update for libqt4	2020-12-01
oval:org.opensuse.security:def:31778	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26426	P	Security update for singularity (Moderate)	2020-12-01
oval:org.opensuse.security:def:30899	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:54625	P	libxerces-c-3_1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28118	P	Security update for gnutls (Moderate)	2020-12-01
oval:org.opensuse.security:def:26567	P	java-1_4_2-ibm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55025	P	unixODBC on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34790	P	Security update for SuSEfirewall2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28835	P	Security update for sudo	2020-12-01
oval:org.opensuse.security:def:32376	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:27263	P	perl-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27397	P	fastjar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55470	P	Security update for cups, cups154 (Moderate)	2020-12-01
oval:org.opensuse.security:def:34904	P	Security update for djvulibre (Moderate)	2020-12-01
oval:org.opensuse.security:def:25850	P	Security update for libreoffice (Low)	2020-12-01
oval:org.opensuse.security:def:30451	P	Security update for Mozilla XULrunner	2020-12-01
oval:org.opensuse.security:def:32520	P	glib2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27671	P	Security update for rubygem-rdoc	2020-12-01
oval:org.opensuse.security:def:30747	P	Security update for ansible (Moderate)	2020-12-01
oval:org.opensuse.security:def:33224	P	pam_mount on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34109	P	Security update for mutt	2020-12-01
oval:org.opensuse.security:def:27963	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:56148	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31767	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26275	P	Security update for freerdp (Important)	2020-12-01
oval:org.opensuse.security:def:30855	P	Security update for dnsmasq (Important)	2020-12-01
oval:org.opensuse.security:def:54624	P	libxcb-dri2-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28104	P	Security update for glib2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31984	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:26528	P	bzip2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31575	P	Security update for sudo	2020-12-01
oval:org.opensuse.security:def:34732	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:28800	P	Security update for openssh (Important)	2020-12-01
oval:org.mitre.oval:def:25446	P	SUSE-SU-2014:0475-1 -- Security update for sudo	2014-09-08
oval:org.mitre.oval:def:24244	P	ELSA-2014:0266: sudo security update (Moderate)	2014-07-21
oval:org.mitre.oval:def:24237	P	RHSA-2014:0266: sudo security update (Moderate)	2014-07-07
oval:org.mitre.oval:def:24334	P	USN-2146-1 -- sudo vulnerabilities	2014-06-30
oval:org.opensuse.security:def:80132	P	Security update for sudo	2014-03-20
oval:com.ubuntu.precise:def:20140106000	V	CVE-2014-0106 on Ubuntu 12.04 LTS (precise) - medium.	2014-03-11
oval:com.redhat.rhsa:def:20140266	P	RHSA-2014:0266: sudo security update (Moderate)	2014-03-10

BACK