VDB
CVE-2005-1993
CVE-2005-1993
PUBLISHED
CVSS 3.700000047683716 LOW
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
EPSS 0.40% · 33.6th percentile
Risk Scores
CVSS 2.0
3.700000047683716
EPSS Score
0.40%
33.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| todd_miller | sudo | 1.6.8, 1.3.1, 1.5.6 |
| n/a | n/a | n/a |
Timeline
- Jun 20, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
References
- 17813 third-party-advisory
- DSA-735 vendor-advisory
- RHSA-2005:535 vendor-advisory
- oval:org.mitre.oval:def:1242 vdb
- oval:org.mitre.oval:def:11341 vdb
- 20050620 Sudo version 1.6.8p9 now available, fixes security issue. mailing-list
- 17396 vdb
- FLSA:162750 vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116 url
- APPLE-SA-2005-11-29 vendor-advisory
- 13993 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2005-1993 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21080 url
- http://secunia.com/advisories/15744 url
- http://www.vupen.com/english/advisories/2005/2659 url
- http://www.vupen.com/english/advisories/2005/0821 technical
- http://www.novell.com/linux/security/advisories/2005_36_sudo.html technical
- http://www.securityfocus.com/bid/15647 technical
- http://www.sudo.ws/sudo/alerts/path_race.html technical