{"id":"CVE-2013-1775","aliases":["DEBIAN-CVE-2013-1775","DSA-2642-1","EUVD-2013-1800","GHSA-3f5j-4h2q-jfx9","RHSA-2013:1353","RHSA-2013:1701","openSUSE-SU-2024:10551-1"],"status":"published","title":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically...","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03176,"percentile":0.88132,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2013-03-04T21:00:00Z","modified":"2026-09-01T20:03:14Z","exploits":[{"source":"metasploit","id":"exploit/osx/local/sudo_password_bypass","title":"Mac OS X Sudo Password Bypass","type":"exploit","platform":"OSX,Unix","date":"2013-02-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/osx/local/sudo_password_bypass"},{"source":"exploitdb","id":"EDB-27944","title":"Apple Mac OSX - Sudo Password Bypass (Metasploit)","type":"local","platform":"osx","date":"2013-08-29","verified":true,"url":"https://www.exploit-db.com/exploits/27944"},{"source":"exploitdb","id":"EDB-27965","title":"Apple Mac OSX 10.8.4 - Local Privilege Escalation","type":"local","platform":"osx","date":"2013-08-30","verified":true,"url":"https://www.exploit-db.com/exploits/27965"},{"source":"pocgithub","id":"bekhzod0725/perl-CVE-2013-1775","title":"bekhzod0725/perl-CVE-2013-1775","date":"2017-02-11","url":"https://github.com/bekhzod0725/perl-CVE-2013-1775"}],"fixes":[{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.8.5p2-1+nmu1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.8.5p2-1+nmu1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.8.5p2-1+nmu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5p2-1+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5p2-1+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5p2-1+nmu1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4p4-2.squeeze.4"}]}],"versions":["1.7.4p4-2.squeeze.1","1.7.4p4-2.squeeze.2","1.7.4p4-2.squeeze.3"],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-28.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-28.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-28.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-28.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.18p1-1.1"}]}],"bundled":6}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"todd_miller","product":"sudo"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/58203","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.sudo.ws/repos/sudo/rev/ddf399e3e306","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"http://www.sudo.ws/sudo/alerts/epoch_ticket.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://osvdb.org/90677","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1701.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2642","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1754-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2013\u0026m=slackware-security.517440","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2013/02/27/22","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1353.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://support.apple.com/kb/HT205031","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"http://support.apple.com/kb/HT5880","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1775","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3f5j-4h2q-jfx9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1775","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1353","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=916363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=916365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=949751","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1353.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1775","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1776","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1776","tags":["advisory"]},{"url":"http://www.sudo.ws/sudo/alerts/tty_tickets.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2776","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2776","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1701","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=949753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994626","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1701.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2777","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1776","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-1775","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2013-03-04T21:00:00Z","modified":"2024-08-06T15:13:32.822Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-1800","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2013-03-04T21:00:00Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-3f5j-4h2q-jfx9","title":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically...","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2022-05-17T03:46:32Z","modified":"2023-01-27T05:09:11Z","updated_at":"2026-11-02T14:43:21.634382Z"}],"nvd":[{"id":"CVE-2013-1775","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2013-03-05T21:38:56.293Z","modified":"2026-06-16T23:52:05.853Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:24.091325Z"}],"osv":[{"id":"CVE-2013-1775","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2013-03-05T21:38:56Z","modified":"2026-04-10T03:44:23.786832Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1775","description":"sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.","status":"published","published":"2013-03-05T21:38:56.293Z","modified":"2026-09-01T20:03:14.758025807Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DSA-2642-1","title":"sudo - several issues","status":"published","published":"2013-03-09T00:00:00Z","modified":"2026-03-09T01:19:48.940211Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10551-1","title":"sudo-1.8.18p1-1.1 on GA media","description":"These are all security issues fixed in the sudo-1.8.18p1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:53.964031Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:1353","title":"Red Hat Security Advisory: sudo security and bug fix update","status":"published","published":"2024-09-15T20:53:53Z","modified":"2026-06-26T10:22:21Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1701","title":"Red Hat Security Advisory: sudo security, bug fix and enhancement update","status":"published","published":"2024-09-15T21:04:24Z","modified":"2026-06-26T10:22:48Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}