CVE-2013-1775 (CNNVD-201302-613)
MEDIUM
有利用代码
中文标题:
Todd Miller Sudo 本地验证绕过漏洞
英文标题:
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximat...
CVSS分数:
6.9
发布时间:
2013-03-04 21:00:00
漏洞类型:
授权问题
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v5
漏洞描述
中文描述:
Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。 Todd Miller‘sudo’1.6.0至1.7.10p7版本以及1.8.0至1.8.6p7版本中存在本地验证绕过漏洞。本地攻击者利用该漏洞绕过验证机制进而获得未授权访问权限。成功的利用可导致其他攻击。
英文描述:
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
CWE类型:
CWE-264
标签:
local
osx
Metasploit
OSVDB-90677
David Kennedy (ReL1K)
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| todd_miller | sudo | 1.6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.2p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.3_p7 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.4p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.7 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.7p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.8 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.8p12 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.9 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.9p20 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.9p21 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.9p22 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.6.9p23 | - | - |
cpe:2.3:a:todd_miller:sudo:1.6.9p23:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.0 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.1p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.1p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.3p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.3p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.3p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4p4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4p4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.4p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.5p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.5p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.5p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.5p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.5p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.5p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.8.6p6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.8.6p6:*:*:*:*:*:*:*
|
| apple | mac_os_x | * | - | - |
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.0 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.2p7 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.3b1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.4p6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.4p6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.6p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.6p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.6p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.6p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.7 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.8 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.8p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.8p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.8p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.8p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.9 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.9p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.9p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p1 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p1:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p2 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p2:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p3 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p3:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p4 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p4:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p5 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p5:*:*:*:*:*:*:*
|
| todd_miller | sudo | 1.7.10p6 | - | - |
cpe:2.3:a:todd_miller:sudo:1.7.10p6:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
58203
vdb-entry
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
90677
vdb-entry
cve.org
访问
cve.org
RHSA-2013:1701
vendor-advisory
cve.org
访问
cve.org
DSA-2642
vendor-advisory
cve.org
访问
cve.org
openSUSE-SU-2013:0495
vendor-advisory
cve.org
访问
cve.org
USN-1754-1
vendor-advisory
cve.org
访问
cve.org
APPLE-SA-2015-08-13-2
vendor-advisory
cve.org
访问
cve.org
APPLE-SA-2013-09-12-1
vendor-advisory
cve.org
访问
cve.org
SSA:2013-065-01
vendor-advisory
cve.org
访问
cve.org
[oss-security] 20130227 CVE request: sudo authentication bypass when clock is reset
mailing-list
cve.org
访问
cve.org
RHSA-2013:1353
vendor-advisory
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
ExploitDB EDB-27944
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-27944
EXPLOIT
exploitdb
访问
exploitdb
CVE Reference: CVE-2013-1775
ADVISORY
cve.org
访问
cve.org
ExploitDB EDB-27965
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-27965
EXPLOIT
exploitdb
访问
exploitdb
CVSS评分详情
6.9
MEDIUM
CVSS向量:
AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS版本:
2.0
机密性
COMPLETE
完整性
COMPLETE
可用性
COMPLETE
时间信息
发布时间:
2013-03-04 21:00:00
修改时间:
2024-08-06 15:13:32
创建时间:
2025-11-11 15:33:32
更新时间:
2025-11-11 16:23:51
利用信息
此漏洞有可利用代码！
利用代码数量:
2
利用来源:
未知
未知
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2013-1775 |
2025-11-11 15:18:34 | 2025-11-11 07:33:32 |
| NVD | nvd_CVE-2013-1775 |
2025-11-11 14:54:13 | 2025-11-11 07:42:20 |
| CNNVD | cnnvd_CNNVD-201302-613 |
2025-11-11 15:09:20 | 2025-11-11 07:50:35 |
| EXPLOITDB | exploitdb_EDB-27944 |
2025-11-11 15:05:29 | 2025-11-11 08:23:51 |
| EXPLOITDB | exploitdb_EDB-27965 |
2025-11-11 15:05:29 | 2025-11-11 08:23:51 |
版本与语言
当前版本:
v5
主要语言:
EN
支持语言:
EN
ZH
其他标识符:
:
:
:
:
安全公告
暂无安全公告信息
变更历史
v5
EXPLOITDB
2025-11-11 16:23:51
references_count: 20 → 22; tags_count: 4 → 5
查看详细变更
- references_count: 20 -> 22
- tags_count: 4 -> 5
v4
EXPLOITDB
2025-11-11 16:23:51
references_count: 17 → 20; tags_count: 0 → 4; data_sources: ['cnnvd', 'cve', 'nvd'] → ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- references_count: 17 -> 20
- tags_count: 0 -> 4
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
v3
CNNVD
2025-11-11 15:50:35
vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-201302-613; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201302-613
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:42:20
cvss_score: 未提取 → 6.9; cvss_vector: NOT_EXTRACTED → AV:L/AC:M/Au:N/C:C/I:C/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 80; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 6.9
- cvss_vector: NOT_EXTRACTED -> AV:L/AC:M/Au:N/C:C/I:C/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 80
- data_sources: ['cve'] -> ['cve', 'nvd']