2017-10-16 12:31:07 -04:00
{
2019-03-18 00:12:36 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2013-1775" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 00:12:36 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
} ,
{
"name" : "58203" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/58203"
} ,
{
"name" : "http://www.sudo.ws/repos/sudo/rev/ddf399e3e306" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.sudo.ws/repos/sudo/rev/ddf399e3e306"
} ,
{
"name" : "http://www.sudo.ws/sudo/alerts/epoch_ticket.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.sudo.ws/sudo/alerts/epoch_ticket.html"
} ,
{
"name" : "90677" ,
"refsource" : "OSVDB" ,
"url" : "http://osvdb.org/90677"
} ,
{
"name" : "RHSA-2013:1701" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2013-1701.html"
} ,
{
"name" : "DSA-2642" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2013/dsa-2642"
} ,
{
"name" : "openSUSE-SU-2013:0495" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html"
} ,
{
"name" : "USN-1754-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-1754-1"
} ,
{
"name" : "APPLE-SA-2015-08-13-2" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
} ,
{
"name" : "APPLE-SA-2013-09-12-1" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html"
} ,
{
"name" : "SSA:2013-065-01" ,
"refsource" : "SLACKWARE" ,
"url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440"
} ,
{
"name" : "[oss-security] 20130227 CVE request: sudo authentication bypass when clock is reset" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2013/02/27/22"
} ,
{
"name" : "RHSA-2013:1353" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2013-1353.html"
} ,
{
"name" : "https://support.apple.com/kb/HT205031" ,
"refsource" : "CONFIRM" ,
"url" : "https://support.apple.com/kb/HT205031"
} ,
{
"name" : "http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f"
} ,
{
"name" : "http://support.apple.com/kb/HT5880" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.apple.com/kb/HT5880"
}
]
}
}