CVE-2010-1163: The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in th...

Security readout for executives and security teams

This is a sudo local privilege escalation issue. In specific configurations, a local user could trick sudo command matching into running an unintended executable from the current directory. Business impact depends on whether affected sudo versions and risky PATH or sudoers settings exist on managed Unix/Linux systems. Exposure is most likely on older Linux/Unix systems running sudo 1.6.8 through 1.7.2p5, especially where users have sudoers permissions involving pseudo-commands and PATH includes the current directory. Modern, fully patched systems are less likely exposed, but legacy images and appliances should be checked. Treat this as a legacy local privilege escalation risk. It is not presented as remotely exploitable or actively exploited in the supplied sources, but exposed systems could allow privilege misuse by local users. Remediate during legacy Linux hardening and baseline refresh work. Mitigation focus: Apply vendor sudo security updates from the relevant operating system advisory.; Remove current-directory entries from PATH for users and privileged workflows.; Review sudoers entries involving pseudo-commands, including sudoedit-related permissions..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.