Description
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
Affected products
- todd_miller / sudo1.5 – 1.5
- todd_miller / sudo1.5.2 – 1.5.2
- todd_miller / sudo1.5.3 – 1.5.3
References
- MAILING_LISThttp://marc.info/?l=bugtraq&m=88465708614896&w=2