7.2

CVE-2015-5602

Exploit

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

Data is provided by the National Vulnerability Database (NVD)
Sudo Project ≫ Sudo Version <= 1.8.14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.1% 0.898
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
http://www.sudo.ws/stable.html#1.8.15
Vendor Advisory
Release Notes
https://www.exploit-db.com/exploits/37710/
Third Party Advisory
Exploit