Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2009-0034
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-30 Jan, 2009 | 19:30
Updated At-23 Apr, 2026 | 00:35

parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary2.06.9MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Type: Primary
Version: 3.1
Base score: 7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 2.0
Base score: 6.9
Base severity: MEDIUM
Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C
CPE Matches
gratisoft
gratisoft
>>sudo>>1.6.9
cpe:2.3:a:gratisoft:sudo:1.6.9:p17:*:*:*:*:*:*
gratisoft
gratisoft
>>sudo>>1.6.9
cpe:2.3:a:gratisoft:sudo:1.6.9:p18:*:*:*:*:*:*
gratisoft
gratisoft
>>sudo>>1.6.9
cpe:2.3:a:gratisoft:sudo:1.6.9:p19:*:*:*:*:*:*
VMware (Broadcom Inc.)
vmware
>>esx>>4.0
cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-863Primarynvd@nist.gov
CWE ID: CWE-863
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.vmware.com/pipermail/security-announce/2009/000060.htmlsecalert@redhat.com
Broken Link
http://osvdb.org/51736secalert@redhat.com
Broken Link
http://secunia.com/advisories/33753secalert@redhat.com
Not Applicable
http://secunia.com/advisories/33840secalert@redhat.com
Not Applicable
http://secunia.com/advisories/33885secalert@redhat.com
Not Applicable
http://secunia.com/advisories/35766secalert@redhat.com
Not Applicable
http://wiki.rpath.com/Advisories:rPSA-2009-0021secalert@redhat.com
Broken Link
http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327secalert@redhat.com
Product
Release Notes
http://www.mandriva.com/security/advisories?name=MDVSA-2009:033secalert@redhat.com
Broken Link
http://www.redhat.com/support/errata/RHSA-2009-0267.htmlsecalert@redhat.com
Not Applicable
http://www.securityfocus.com/archive/1/500546/100/0/threadedsecalert@redhat.com
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/504849/100/0/threadedsecalert@redhat.com
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/33517secalert@redhat.com
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021688secalert@redhat.com
Broken Link
Third Party Advisory
VDB Entry
http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=hsecalert@redhat.com
Broken Link
http://www.vmware.com/security/advisories/VMSA-2009-0009.htmlsecalert@redhat.com
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1865secalert@redhat.com
Permissions Required
https://bugzilla.novell.com/show_bug.cgi?id=468923secalert@redhat.com
Issue Tracking
Permissions Required
https://issues.rpath.com/browse/RPL-2954secalert@redhat.com
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856secalert@redhat.com
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462secalert@redhat.com
Broken Link
http://lists.vmware.com/pipermail/security-announce/2009/000060.htmlaf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://osvdb.org/51736af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://secunia.com/advisories/33753af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/33840af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/33885af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://secunia.com/advisories/35766af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://wiki.rpath.com/Advisories:rPSA-2009-0021af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327af854a3a-2127-422b-91ae-364da2661108
Product
Release Notes
http://www.mandriva.com/security/advisories?name=MDVSA-2009:033af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.redhat.com/support/errata/RHSA-2009-0267.htmlaf854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://www.securityfocus.com/archive/1/500546/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/504849/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/33517af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021688af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
VDB Entry
http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=haf854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.vmware.com/security/advisories/VMSA-2009-0009.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1865af854a3a-2127-422b-91ae-364da2661108
Permissions Required
https://bugzilla.novell.com/show_bug.cgi?id=468923af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Permissions Required
https://issues.rpath.com/browse/RPL-2954af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462af854a3a-2127-422b-91ae-364da2661108
Broken Link
Hyperlink: http://lists.vmware.com/pipermail/security-announce/2009/000060.html
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://osvdb.org/51736
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://secunia.com/advisories/33753
Source: secalert@redhat.com
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/33840
Source: secalert@redhat.com
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/33885
Source: secalert@redhat.com
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/35766
Source: secalert@redhat.com
Resource:
Not Applicable
Hyperlink: http://wiki.rpath.com/Advisories:rPSA-2009-0021
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327
Source: secalert@redhat.com
Resource:
Product
Release Notes
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:033
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-0267.html
Source: secalert@redhat.com
Resource:
Not Applicable
Hyperlink: http://www.securityfocus.com/archive/1/500546/100/0/threaded
Source: secalert@redhat.com
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securityfocus.com/archive/1/504849/100/0/threaded
Source: secalert@redhat.com
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securityfocus.com/bid/33517
Source: secalert@redhat.com
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securitytracker.com/id?1021688
Source: secalert@redhat.com
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0009.html
Source: secalert@redhat.com
Resource:
Third Party Advisory
Hyperlink: http://www.vupen.com/english/advisories/2009/1865
Source: secalert@redhat.com
Resource:
Permissions Required
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=468923
Source: secalert@redhat.com
Resource:
Issue Tracking
Permissions Required
Hyperlink: https://issues.rpath.com/browse/RPL-2954
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462
Source: secalert@redhat.com
Resource:
Broken Link
Hyperlink: http://lists.vmware.com/pipermail/security-announce/2009/000060.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://osvdb.org/51736
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://secunia.com/advisories/33753
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/33840
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/33885
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Not Applicable
Hyperlink: http://secunia.com/advisories/35766
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Not Applicable
Hyperlink: http://wiki.rpath.com/Advisories:rPSA-2009-0021
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Product
Release Notes
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:033
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-0267.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Not Applicable
Hyperlink: http://www.securityfocus.com/archive/1/500546/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securityfocus.com/archive/1/504849/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securityfocus.com/bid/33517
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.securitytracker.com/id?1021688
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
VDB Entry
Hyperlink: http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0009.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://www.vupen.com/english/advisories/2009/1865
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Permissions Required
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=468923
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Issue Tracking
Permissions Required
Hyperlink: https://issues.rpath.com/browse/RPL-2954
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Change History
0Changes found
Details not found