← back
CVE-2004-1689

CVE-2004-1689

EPSS 1.2%
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.nl/0409-exploits/sudoedit.txtunverifiedexploitdbwww.exploit-db.com/exploits/470unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=109537972929201&w=2http://packetstormsecurity.nl/0409-exploits/sudoedit.txthttp://secunia.com/advisories/12596https://exchange.xforce.ibmcloud.com/vulnerabilities/17424http://www.ciac.org/ciac/bulletins/o-219.shtmlhttp://www.kb.cert.org/vuls/id/424358http://www.osvdb.org/10023http://www.securityfocus.com/bid/11204http://www.sudo.ws/sudo/alerts/sudoedit.html