openSUSE Security Update : sudo (openSUSE-SU-2013:0495-1)

medium Nessus Plugin ID 74928

Synopsis

The remote openSUSE host is missing a security update.

Description

sudo was updated to fix two security issues, where adjusting the time of the syste could be used to regain access to sudo sessions if they onc were granted. (CVE-2013-1775,CVE-2013-1776)

Solution

Update the affected sudo packages.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=806919

https://bugzilla.novell.com/show_bug.cgi?id=806921

https://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html

Plugin Details

Severity: Medium

ID: 74928

File Name: openSUSE-2013-221.nasl

Version: 1.4

Type: local

Agent: unix

Published: 6/13/2014

Updated: 1/19/2021

Supported Sensors: Nessus Agent

Risk Information

VPR

Risk Factor: Critical

Score: 9

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:sudo, p-cpe:/a:novell:opensuse:sudo-debuginfo, p-cpe:/a:novell:opensuse:sudo-debugsource, p-cpe:/a:novell:opensuse:sudo-devel, cpe:/o:novell:opensuse:12.1, cpe:/o:novell:opensuse:12.2, cpe:/o:novell:opensuse:12.3

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/13/2013

Exploitable With

CANVAS (CANVAS)

Metasploit (Mac OS X Sudo Password Bypass)

Reference Information

CVE: CVE-2013-1775, CVE-2013-1776