Alerts This Week
Warning Icon 1 854
Alerts This Week
Warning Icon 1 854

Red Hat Enterprise Linux 5: RHSA-2010:0675-01 Important Sudo Threat

red hat
Calendar Grey September 7, 2010
Dist Redhat Esm H88
A crucial update for sudo has been released for Red Hat Enterprise Linux, addressing significant privilege escalation vulnerabilities.
An updated sudo package that fixes one security issue is now available for Red Hat Enterprise Linux 5

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

Summary

The sudo (superuser do) utility allows system administrators to give certain users the ability to run commands as root.
A flaw was found in the way sudo handled Runas specifications containing both a user and a group list. If a local user were authorized by the sudoers file to perform their sudo commands with the privileges of a specified user and group, they could use this flaw to run those commands with the privileges of either an arbitrary user or group on the system. (CVE-2010-2956)
Red Hat would like to thank Markus Wuethrich of Swiss Post - PostFinance for reporting this issue.
Users of sudo should upgrade to this updated package, which contains a backported patch to correct this issue.

Topics%20covered

Topics Covered

security advisory Red Hat privilege escalation security fix important sudo system administration

References

https://access.redhat.com/security/cve/CVE-2010-2956 https://access.redhat.com/security/updates/classification#important

Package List

Red Hat Enterprise Linux Desktop (v. 5 client):
Source:
i386: sudo-1.7.2p1-8.el5_5.i386.rpm sudo-debuginfo-1.7.2p1-8.el5_5.i386.rpm
x86_64: sudo-1.7.2p1-8.el5_5.x86_64.rpm sudo-debuginfo-1.7.2p1-8.el5_5.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
Source:
i386: sudo-1.7.2p1-8.el5_5.i386.rpm sudo-debuginfo-1.7.2p1-8.el5_5.i386.rpm
ia64: sudo-1.7.2p1-8.el5_5.ia64.rpm sudo-debuginfo-1.7.2p1-8.el5_5.ia64.rpm
ppc: sudo-1.7.2p1-8.el5_5.ppc.rpm sudo-debuginfo-1.7.2p1-8.el5_5.ppc.rpm
s390x: sudo-1.7.2p1-8.el5_5.s390x.rpm sudo-debuginfo-1.7.2p1-8.el5_5.s390x.rpm
x86_64: sudo-1.7.2p1-8.el5_5.x86_64.rpm sudo-debuginfo-1.7.2p1-8.el5_5.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2010:0675-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2010:0675.html
Issue date: 2010-09-07

Topic

An updated sudo package that fixes one security issue is now available forRed Hat Enterprise Linux 5.The Red Hat Security Response Team has rated this update as havingimportant security impact. A Common Vulnerability Scoring System (CVSS)base score, which gives a detailed severity rating, is available from theCVE link in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat privilege escalation security fix important sudo system administration

Relevant Releases Architectures

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64

Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

Bugs Fixed

628628 - CVE-2010-2956 sudo: incorrect handling of RunAs specification with both user and group lists

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here