CVE-2004-1689 - sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local

CVE-2004-1689

Summary

sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.

References

http://marc.info/?l=bugtraq&m=109537972929201&w=2
http://packetstormsecurity.nl/0409-exploits/sudoedit.txt
http://secunia.com/advisories/12596
http://www.ciac.org/ciac/bulletins/o-219.shtml
http://www.kb.cert.org/vuls/id/424358
http://www.osvdb.org/10023
http://www.securityfocus.com/bid/11204
http://www.sudo.ws/sudo/alerts/sudoedit.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17424

Vulnerable Configurations

cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	11204
bugtraq	20040916 [sudo-announce] Sudo version 1.6.8p1 now available (fwd)
cert-vn	VU#424358
ciac	O-219
confirm	http://www.sudo.ws/sudo/alerts/sudoedit.html
misc	http://packetstormsecurity.nl/0409-exploits/sudoedit.txt
osvdb	10023
secunia	12596
xf	sudo-sudoedit-view-files(17424)

Last major update

11-07-2017 - 01:31

Published

16-09-2004 - 04:00

Last modified

11-07-2017 - 01:31