Vulnerabilities > Todd Miller > Sudo > 1.6.9p5

DATE CVE VULNERABILITY TITLE RISK
2010-06-07 CVE-2010-1646 Permissions, Privileges, and Access Controls vulnerability in Todd Miller Sudo
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
local
high complexity
todd-miller CWE-264
6.2