Security Advisory

CVE-2015-5602

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-17 15:00:00

Last updated 2024-08-06 06:50:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

← Browse all CVEs View on cve.org ↗