tocsin

Debian/sudo: unknown

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/f

Action: Upgrade sudo to 1.8.15-1.1 or later.

Affected

introducedfixedlast affected
01.8.15-1.1-

Fixed versions

1.8.15-1.1

Sources

published · modified · JSON