NetSight
IP …
medium6.9Public exploit code

CVE-2013-1775

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

Affected products

VendorProductAffected versions
Todd MillerSudo
Versions 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3_p7
AppleMac Os X
through 10.10.4

Weakness classification

CWE-264

References