CVE-2015-5602 PUBLISHED

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

EPSS 5.51% · 90.2th percentile

Risk Scores

EPSS Score
5.51%
90.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSsudo0, 1.8.6p3-0ubuntu3, 1.8.8-2ubuntu1

Timeline

References

Open in Interactive Console →