CVE

Id
10117  
CVE No.
CVE-2004-1689  
Status
Candidate  
Description
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.  
Phase
Assigned (20050221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
69458 10117 CVE-2004-1689 BUGTRAQ:20040916 [sudo-announce] Sudo version 1.6.8p1 now available (fwd)  View
69459 10117 CVE-2004-1689 URL:http://marc.info/?l=bugtraq&m=109537972929201&w=2  View
69460 10117 CVE-2004-1689 MISC:http://packetstormsecurity.nl/0409-exploits/sudoedit.txt  View
69461 10117 CVE-2004-1689 CONFIRM:http://www.sudo.ws/sudo/alerts/sudoedit.html  View
69462 10117 CVE-2004-1689 CERT-VN:VU#424358  View
69463 10117 CVE-2004-1689 URL:http://www.kb.cert.org/vuls/id/424358  View
69464 10117 CVE-2004-1689 CIAC:O-219  View
69465 10117 CVE-2004-1689 URL:http://www.ciac.org/ciac/bulletins/o-219.shtml  View
69466 10117 CVE-2004-1689 BID:11204  View
69467 10117 CVE-2004-1689 URL:http://www.securityfocus.com/bid/11204  View
69468 10117 CVE-2004-1689 OSVDB:10023  View
69469 10117 CVE-2004-1689 URL:http://www.osvdb.org/10023  View
69470 10117 CVE-2004-1689 SECUNIA:12596  View
69471 10117 CVE-2004-1689 URL:http://secunia.com/advisories/12596  View
69472 10117 CVE-2004-1689 XF:sudo-sudoedit-view-files(17424)  View

Related JVN