|
|
CVE Reference: CVE-2004-1689 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2004-1689 |
|
|
Description: sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/17424 SAID Secunia Advisory: SA12596 OSVDB 10023 MISC http://packetstormsecurity.nl/0409-exploits/sudoedit.txt CONFIRM http://www.sudo.ws/sudo/alerts/sudoedit.html CIAC http://www.ciac.org/ciac/bulletins/o-219.shtml CERT-VN 424358 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=109537972929201&w=2 BID 11204 |
|
| Return to the previous page. |
