CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.

• CWE-20

• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/39384Vendor Advisory
• http://secunia.com/advisories/39399
• http://secunia.com/advisories/39474Vendor Advisory
• http://secunia.com/advisories/39543
• http://secunia.com/advisories/43068
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
• http://wiki.rpath.com/Advisories:rPSA-2010-0075
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:078
• http://www.osvdb.org/63878
• http://www.redhat.com/support/errata/RHSA-2010-0361.html
• http://www.securityfocus.com/archive/1/510827/100/0/threaded
• http://www.securityfocus.com/archive/1/510846/100/0/threaded
• http://www.securityfocus.com/archive/1/510880/100/0/threaded
• http://www.securityfocus.com/archive/1/514489/100/0/threaded
• http://www.securityfocus.com/bid/39468
• http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html
• http://www.ubuntu.com/usn/USN-928-1
• http://www.vupen.com/english/advisories/2010/0881Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0895Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0904
• http://www.vupen.com/english/advisories/2010/0949
• http://www.vupen.com/english/advisories/2010/0956
• http://www.vupen.com/english/advisories/2010/1019
• http://www.vupen.com/english/advisories/2011/0212
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57836
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/39384Vendor Advisory
• http://secunia.com/advisories/39399
• http://secunia.com/advisories/39474Vendor Advisory
• http://secunia.com/advisories/39543
• http://secunia.com/advisories/43068
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
• http://wiki.rpath.com/Advisories:rPSA-2010-0075
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:078
• http://www.osvdb.org/63878
• http://www.redhat.com/support/errata/RHSA-2010-0361.html
• http://www.securityfocus.com/archive/1/510827/100/0/threaded
• http://www.securityfocus.com/archive/1/510846/100/0/threaded
• http://www.securityfocus.com/archive/1/510880/100/0/threaded
• http://www.securityfocus.com/archive/1/514489/100/0/threaded
• http://www.securityfocus.com/bid/39468
• http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html
• http://www.ubuntu.com/usn/USN-928-1
• http://www.vupen.com/english/advisories/2010/0881Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0895Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0904
• http://www.vupen.com/english/advisories/2010/0949
• http://www.vupen.com/english/advisories/2010/0956
• http://www.vupen.com/english/advisories/2010/1019
• http://www.vupen.com/english/advisories/2011/0212
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57836
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382

Published

Apr 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1157Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 …
• CVE-2010-1158Integer overflow in the regular expression engine in Perl 5.…
• CVE-2010-1159Multiple heap-based buffer overflows in Aircrack-ng before 1…
• CVE-2010-1160GNU nano before 2.2.4 does not verify whether a file has bee…
• CVE-2010-1161Race condition in GNU nano before 2.2.4, when run by root to…
• CVE-2010-1162The release_one_tty function in drivers/char/tty_io.c in the…
• CVE-2010-1164Multiple cross-site scripting (XSS) vulnerabilities in Atlas…
• CVE-2010-1165Atlassian JIRA 3.12 through 4.1 allows remote authenticated …
• CVE-2010-1166The fbComposite function in fbpict.c in the Render extension…
• CVE-2010-1167fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, …
• CVE-2010-1168The Safe (aka Safe.pm) module before 2.25 for Perl allows co…
• CVE-2010-1169PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before …