CVE-2010-0426

CVE-2010-0426 is a medium-severity vulnerability in Todd Miller Sudo with a CVSS 2.0 base score of 6.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-264.

Key facts

• Severity: Medium (CVSS 2.0 base score 6.9)
• EPSS exploit prediction: 1% (62nd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-264
• Affected product: Todd Miller Sudo
• Published: 2010-02-24
• Last modified: 2026-06-16

Description

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

Frequently asked questions

What is CVE-2010-0426?

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

How severe is CVE-2010-0426?

CVE-2010-0426 has a CVSS 2.0 base score of 6.9, rated medium severity.

Is CVE-2010-0426 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-0426?

CVE-2010-0426 primarily affects Todd Miller Sudo. In total, 32 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-0426?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2010-0426 published?

CVE-2010-0426 was published on 2010-02-24 and last updated on 2026-06-16.

References

• ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040578.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
• http://secunia.com/advisories/38659
• http://secunia.com/advisories/38762
• http://secunia.com/advisories/38795
• http://secunia.com/advisories/38803
• http://secunia.com/advisories/38915
• http://secunia.com/advisories/39399
• http://securitytracker.com/id?1023658
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
• http://sudo.ws/bugs/show_bug.cgi?id=389
• http://sudo.ws/repos/sudo/rev/88f3181692fe
• http://sudo.ws/repos/sudo/rev/f86e1b56d074
• http://wiki.rpath.com/Advisories:rPSA-2010-0075
• http://www.debian.org/security/2010/dsa-2006
• http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml
• http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:049
• http://www.securityfocus.com/archive/1/514489/100/0/threaded
• http://www.securityfocus.com/bid/38362
• http://www.sudo.ws/sudo/stable.html
• http://www.ubuntu.com/usn/USN-905-1
• http://www.vupen.com/english/advisories/2010/0450
• http://www.vupen.com/english/advisories/2010/0949
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10814
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7238

Affected products (32)

• cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.9_p17:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.9_p18:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.6.9_p19:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*
• cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*

More vulnerabilities in Todd Miller Sudo

• CVE-2005-1831 — High (CVSS 8.4): Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using…
• CVE-2012-2337 — High (CVSS 7.2): sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a…
• CVE-2012-0809 — High (CVSS 7.2): Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute…
• CVE-2007-3149 — High (CVSS 7.2): sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to…
• CVE-2006-0151 — High (CVSS 7.2): sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users…
• CVE-2004-1051 — High (CVSS 7.2): sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to…

All CVEs affecting Todd Miller Sudo →

Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities

• CVE-2016-8363 — Critical (CVSS 10.0): An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232…
• CVE-2016-7457 — Critical (CVSS 10.0): VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt…
• CVE-2015-7425 — Critical (CVSS 10.0): The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data…
• CVE-2015-8267 — Critical (CVSS 10.0): The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self…
• CVE-2015-7919 — Critical (CVSS 10.0): SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of…
• CVE-2015-7071 — Critical (CVSS 10.0): The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for…

Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →