CVE-2005-1993: Race Condition
Published Jun 20, 2005
·Updated
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Affected Software
29 affected components
Todd Miller Sudo=1.5.8
Todd Miller Sudo=1.6.3_p6
Todd Miller Sudo=1.3.1
Todd Miller Sudo=1.5.9
Todd Miller Sudo=1.6.6
Todd Miller Sudo=1.6.8_p7
Todd Miller Sudo=1.6.3
Todd Miller Sudo=1.6.4_p2
Todd Miller Sudo=1.6.1
Todd Miller Sudo=1.6.3_p5
Todd Miller Sudo=1.5.7
Todd Miller Sudo=1.6.2
Todd Miller Sudo=1.6.8
Todd Miller Sudo=1.6.4_p1
Todd Miller Sudo=1.6.3_p2
Todd Miller Sudo=1.6.3_p4
Todd Miller Sudo=1.6.5_p2
Todd Miller Sudo=1.6.5
Todd Miller Sudo=1.6.3_p3
Todd Miller Sudo=1.6.8_p1
Todd Miller Sudo=1.6.5_p1
Todd Miller Sudo=1.6.3_p7
Todd Miller Sudo=1.6
Todd Miller Sudo=1.6.4
Todd Miller Sudo=1.6.7
Todd Miller Sudo=1.6.8_p8
Todd Miller Sudo=1.6.3_p1
Todd Miller Sudo=1.5.6
Todd Miller Sudo=1.6.7_p5
Remediation
Patch Available
Event History
Jun 20, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1993?
CVE-2005-1993 is considered to be a high severity vulnerability due to the potential for local privilege escalation.
2
How do I fix CVE-2005-1993?
To fix CVE-2005-1993, upgrade to a patched version of sudo that mitigates the race condition vulnerability.
3
What versions are affected by CVE-2005-1993?
CVE-2005-1993 affects sudo versions from 1.3.1 up to 1.6.8p8.
4
Can CVE-2005-1993 be exploited remotely?
No, CVE-2005-1993 is a local vulnerability and requires local user access to exploit.
5
What attack vector is used in CVE-2005-1993?
CVE-2005-1993 can be exploited through a symlink attack during the use of the ALL pseudo-command in sudo.