Summary
The remote host is missing an update to sudo
announced via advisory FEDORA-2009-1074.
Solution
Apply the appropriate updates.
This update can be installed with the yum update program. Use su -c 'yum update sudo' at the command line.
For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-1074
Insight
Sudo (superuser do) allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict what commands a user may run on a per-host basis, copious logging of each command (providing a clear audit trail of who did what), a configurable timeout of the sudo command, and the ability to use the same configuration file (sudoers) on many different machines.
Update Information:
Fix for incorrect handling of groups in Runas_User
ChangeLog:
* Thu Jan 29 2009 Daniel Kopecek 1.6.9p17-5
- Fix for incorrect handling of groups in Runas_User
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-0034 -
CVSS Base Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities