CVE-2005-1119: Low severity todd miller sudo vulnerability
Published Apr 16, 2005
·Updated
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.
Affected Software
27 affected components
Todd Miller Sudo=1.5.6
Todd Miller Sudo=1.5.7
Todd Miller Sudo=1.5.8
Todd Miller Sudo=1.5.9
Todd Miller Sudo=1.6
Todd Miller Sudo=1.6.1
Todd Miller Sudo=1.6.2
Todd Miller Sudo=1.6.3
Todd Miller Sudo=1.6.3_p1
Todd Miller Sudo=1.6.3_p2
Todd Miller Sudo=1.6.3_p3
Todd Miller Sudo=1.6.3_p4
Todd Miller Sudo=1.6.3_p5
Todd Miller Sudo=1.6.3_p6
Todd Miller Sudo=1.6.3_p7
Todd Miller Sudo=1.6.4
Todd Miller Sudo=1.6.4_p1
Todd Miller Sudo=1.6.4_p2
Todd Miller Sudo=1.6.5
Todd Miller Sudo=1.6.5_p1
Todd Miller Sudo=1.6.5_p2
Todd Miller Sudo=1.6.6
Todd Miller Sudo=1.6.7
Todd Miller Sudo=1.6.7_p5
Todd Miller Sudo=1.6.8
Todd Miller Sudo=1.6.8_p1
Todd Miller Sudo=1.6.8_p8
Event History
Apr 16, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1119?
CVE-2005-1119 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2005-1119?
To fix CVE-2005-1119, upgrade to a version of Sudo later than 1.6.8.
3
What causes the vulnerability CVE-2005-1119?
CVE-2005-1119 is caused by a symlink attack that allows local users to manipulate temporary files.
4
Which versions of Sudo are affected by CVE-2005-1119?
Versions of Sudo 1.6.8 and earlier, including 1.5.6 through 1.6.8, are affected by CVE-2005-1119.
5
Can CVE-2005-1119 be exploited remotely?
CVE-2005-1119 cannot be exploited remotely as it requires local user access to the system.