CVE-2011-0010

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.

Published: 2011-01-18 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-0010 is rated Low Risk (31.4/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.50%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2011-0010

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.11% 0.50% +0.39%
2 2025-03-17 0.05% 0.11% +0.06%
3 2023-03-07 — 0.05% —

Full EPSS history (6 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-0010

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.4 2.0 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 3.4 6.4 [email protected]

Weakness enumeration for CVE-2011-0010

OS Trackers for CVE-2011-0010

vendor priority summary link
debian not yet assigned CVE-2011-0010 not yet assigned priority: Debian including 1 source packages (sudo), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2011-0010
gentoo high CVE-2011-0010: 1 GLSA(s) (201203-06), 1 atom(s) (app-admin/sudo); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-0010
redhat low — https://access.redhat.com/security/cve/CVE-2011-0010
suse medium CVE-2011-0010 severity moderate: SUSE including 29 source package names (sudo, sudo-1.8.10p3-1.62, …), 119 product×package rows across 76 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (76 product lines)): Known Not Affected 83, Fixed 36. https://www.suse.com/security/cve/CVE-2011-0010/
ubuntu medium CVE-2011-0010 medium priority: Ubuntu including 1 source packages (sudo), 6 status rows across 6 suites (dapper, hardy, karmic, lucid, maverick, upstream): released 4, not-affected 2. https://ubuntu.com/security/CVE-2011-0010

Affected software / configurations for CVE-2011-0010

Vendor Product Version Raw CPE
todd_miller sudo 1.7.0 cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*
todd_miller sudo 1.7.1 cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*
todd_miller sudo 1.7.2 cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p1 cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p2 cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p3 cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p4 cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p5 cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p6 cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*
todd_miller sudo 1.7.2p7 cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*
todd_miller sudo 1.7.3b1 cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:*
todd_miller sudo 1.7.4 cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*
todd_miller sudo 1.7.4p1 cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:*
todd_miller sudo 1.7.4p2 cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:*
todd_miller sudo 1.7.4p3 cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:*
todd_miller sudo 1.7.4p4 cpe:2.3:a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:*

References for CVE-2011-0010

URL Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053341.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://openwall.com/lists/oss-security/2011/01/11/3 Patch
http://openwall.com/lists/oss-security/2011/01/12/1 Patch
http://openwall.com/lists/oss-security/2011/01/12/3
http://secunia.com/advisories/42886 Vendor Advisory
http://secunia.com/advisories/42949
http://secunia.com/advisories/42968
http://secunia.com/advisories/43068
http://secunia.com/advisories/43282
http://security.gentoo.org/glsa/glsa-201203-06.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593654
http://www.mandriva.com/security/advisories?name=MDVSA-2011:018
http://www.osvdb.org/70400
http://www.redhat.com/support/errata/RHSA-2011-0599.html
http://www.securityfocus.com/bid/45774
http://www.sudo.ws/repos/sudo/rev/07d1b0ce530e Patch
http://www.sudo.ws/repos/sudo/rev/fe8a94f96542 Patch
http://www.sudo.ws/sudo/alerts/runas_group_pw.html
http://www.ubuntu.com/usn/USN-1046-1
http://www.vupen.com/english/advisories/2011/0089 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0182
http://www.vupen.com/english/advisories/2011/0195
http://www.vupen.com/english/advisories/2011/0199
http://www.vupen.com/english/advisories/2011/0212
http://www.vupen.com/english/advisories/2011/0362
https://bugzilla.redhat.com/show_bug.cgi?id=668879 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/64636
cvelogic Threat Intelligence