Privilege Escalation via Symlink Attack in Sudo (CVE-2015-5602)

CVE-2015-5602 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

Learn more about our User Device Pen Test.