Sudo symbolic links race condition
Published:		20.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4912
Type:		local
Level:		6/10
Description:		If sudoers file contains specific records, race conditions exist to spoof command with symlink.

Affected:

SUDO : sudo 1.6

Original document

Todd C. Miller, Sudo version 1.6.8p9 now available, fixes security issue. (20.06.2005)

Discuss:

Read or add your comments to this news (0 comments)