Secunia

Reznic Valery has reported a vulnerability in sudo, which can be exploited by malicious, local users to read arbitrary files.

The problem is caused due to insufficient validation of symbolic links when sudoedit ("sudo -u" option) copies temporary files. This can be exploited by replacing a temporary file with a symbolic link referencing an arbitrary file in order to get read access.

Successful exploitation requires access to run sudoedit (sudo -u option).

The vulnerability has been reported in version 1.6.8.

Solution
Update to version 1.6.8p1.
Further details available in Customer Area

Provided and/or discovered by
Reznic Valery

Changelog
Further details available in Customer Area

Original Advisory
http://www.sudo.ws/sudo/alerts/sudoedit.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area