CVE-2013-2776

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

Affected Software

Name	Vendor	Start Version	End Version
Sudo	Todd_miller	1.3.5 (including)	1.3.5 (including)
Sudo	Todd_miller	1.6 (including)	1.6 (including)
Sudo	Todd_miller	1.6.1 (including)	1.6.1 (including)
Sudo	Todd_miller	1.6.2 (including)	1.6.2 (including)
Sudo	Todd_miller	1.6.2p3 (including)	1.6.2p3 (including)
Sudo	Todd_miller	1.6.3 (including)	1.6.3 (including)
Sudo	Todd_miller	1.6.3_p7 (including)	1.6.3_p7 (including)
Sudo	Todd_miller	1.6.4 (including)	1.6.4 (including)
Sudo	Todd_miller	1.6.4p2 (including)	1.6.4p2 (including)
Sudo	Todd_miller	1.6.5 (including)	1.6.5 (including)
Sudo	Todd_miller	1.6.6 (including)	1.6.6 (including)
Sudo	Todd_miller	1.6.7 (including)	1.6.7 (including)
Sudo	Todd_miller	1.6.7p5 (including)	1.6.7p5 (including)
Sudo	Todd_miller	1.6.8 (including)	1.6.8 (including)
Sudo	Todd_miller	1.6.8p12 (including)	1.6.8p12 (including)
Sudo	Todd_miller	1.6.9 (including)	1.6.9 (including)
Sudo	Todd_miller	1.6.9p20 (including)	1.6.9p20 (including)
Sudo	Todd_miller	1.6.9p21 (including)	1.6.9p21 (including)
Sudo	Todd_miller	1.6.9p22 (including)	1.6.9p22 (including)
Sudo	Todd_miller	1.6.9p23 (including)	1.6.9p23 (including)
Sudo	Todd_miller	1.7.0 (including)	1.7.0 (including)
Sudo	Todd_miller	1.7.1 (including)	1.7.1 (including)
Sudo	Todd_miller	1.7.2 (including)	1.7.2 (including)
Sudo	Todd_miller	1.7.2p1 (including)	1.7.2p1 (including)
Sudo	Todd_miller	1.7.2p2 (including)	1.7.2p2 (including)
Sudo	Todd_miller	1.7.2p3 (including)	1.7.2p3 (including)
Sudo	Todd_miller	1.7.2p4 (including)	1.7.2p4 (including)
Sudo	Todd_miller	1.7.2p5 (including)	1.7.2p5 (including)
Sudo	Todd_miller	1.7.2p6 (including)	1.7.2p6 (including)
Sudo	Todd_miller	1.7.2p7 (including)	1.7.2p7 (including)
Sudo	Todd_miller	1.7.3b1 (including)	1.7.3b1 (including)
Sudo	Todd_miller	1.7.4 (including)	1.7.4 (including)
Sudo	Todd_miller	1.7.4p1 (including)	1.7.4p1 (including)
Sudo	Todd_miller	1.7.4p2 (including)	1.7.4p2 (including)
Sudo	Todd_miller	1.7.4p3 (including)	1.7.4p3 (including)
Sudo	Todd_miller	1.7.4p4 (including)	1.7.4p4 (including)
Sudo	Todd_miller	1.7.4p5 (including)	1.7.4p5 (including)
Sudo	Todd_miller	1.7.4p6 (including)	1.7.4p6 (including)
Sudo	Todd_miller	1.7.5 (including)	1.7.5 (including)
Sudo	Todd_miller	1.7.6 (including)	1.7.6 (including)
Sudo	Todd_miller	1.7.6p1 (including)	1.7.6p1 (including)
Sudo	Todd_miller	1.7.6p2 (including)	1.7.6p2 (including)
Sudo	Todd_miller	1.7.7 (including)	1.7.7 (including)
Sudo	Todd_miller	1.7.8 (including)	1.7.8 (including)
Sudo	Todd_miller	1.7.8p1 (including)	1.7.8p1 (including)
Sudo	Todd_miller	1.7.8p2 (including)	1.7.8p2 (including)
Sudo	Todd_miller	1.7.9 (including)	1.7.9 (including)
Sudo	Todd_miller	1.7.9p1 (including)	1.7.9p1 (including)
Sudo	Todd_miller	1.7.10 (including)	1.7.10 (including)
Sudo	Todd_miller	1.7.10p1 (including)	1.7.10p1 (including)
Sudo	Todd_miller	1.7.10p2 (including)	1.7.10p2 (including)
Sudo	Todd_miller	1.7.10p3 (including)	1.7.10p3 (including)
Red Hat Enterprise Linux 5	RedHat	sudo-0:1.7.2p1-28.el5	*
Red Hat Enterprise Linux 6	RedHat	sudo-0:1.8.6p3-12.el6	*
Sudo	Ubuntu	devel	*
Sudo	Ubuntu	hardy	*
Sudo	Ubuntu	lucid	*
Sudo	Ubuntu	oneiric	*
Sudo	Ubuntu	precise	*
Sudo	Ubuntu	quantal	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-2776
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References