CVE-2010-1163
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a...
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
Exploit likelihood
What each source reports
NVD Score used
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
CVE-2010-1163- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
CVE-2010-1163- Updated
- 2026-11-02
EUVDEUVD-2010-1193 No score
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
EUVD-2010-1193- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hh7m-2j26-qw2m No score
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a...
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
GHSA-hh7m-2j26-qw2m- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
CVE-2010-1163- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1163 No score
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
- Record
DEBIAN-CVE-2010-1163- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10551-1 No score
sudo-1.8.18p1-1.1 on GA media
These are all security issues fixed in the sudo-1.8.18p1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10551-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoDebian:12 |
before 1.7.2p6-1 | 1.7.2p6-1 |
sudoDebian:13 |
before 1.7.2p6-1 | 1.7.2p6-1 |
sudoDebian:14 |
before 1.7.2p6-1 | 1.7.2p6-1 |
sudoRed Hat:enterprise_linux:5::client |
before 0:1.7.2p1-6.el5_5 | 0:1.7.2p1-6.el5_5 |
sudo-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.7.2p1-6.el5_5 | 0:1.7.2p1-6.el5_5 |
sudoRed Hat:enterprise_linux:5::server |
before 0:1.7.2p1-6.el5_5 | 0:1.7.2p1-6.el5_5 |
sudo-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.7.2p1-6.el5_5 | 0:1.7.2p1-6.el5_5 |
sudoopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 1.8.18p1-1.1 | 1.8.18p1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1163 is a medium vulnerability (CVSS 6.9) in Todd Miller Sudo, published April 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in sudo 1.7.2p6-1.
References
ubuntu.com/usn/USN-928-1
secunia.com/advisories/43068
redhat.com/support/errata/RHSA-2010-0361.html
vupen.com/english/advisories/2011/0212
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382
Show 37 moreShow less
osvdb.org/63878
securityfocus.com/archive/1/510880/100/0/threaded
mandriva.com/security/advisories?name=MDVSA-2010:078
lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
wiki.rpath.com/Advisories:rPSA-2010-0075
sudo.ws/sudo/alerts/sudoedit_escalate2.html
exchange.xforce.ibmcloud.com/vulnerabilities/57836
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
nvd.nist.gov/vuln/detail/CVE-2010-1163
github.com/advisories/GHSA-hh7m-2j26-qw2m
security-tracker.debian.org/tracker/CVE-2010-1163
access.redhat.com/errata/RHSA-2010:0361
bugzilla.redhat.com/show_bug.cgi?id=580441
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0361.json
cve.org/CVERecord?id=CVE-2010-1163
suse.com/security/cve/CVE-2010-1163