CVE-2015-5602: High severity sudo vulnerability
Published Nov 17, 2015
·Updated
sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home///file.txt."
Affected Software
1 affected component
Sudo Project Sudo<=1.8.14
Event History
Nov 17, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5602?
CVE-2015-5602 is classified as a high severity vulnerability due to the potential for local privilege escalation.
2
How do I fix CVE-2015-5602?
To fix CVE-2015-5602, upgrade Sudo to version 1.8.15 or later.
3
Who is affected by CVE-2015-5602?
CVE-2015-5602 affects users of Sudo versions prior to 1.8.15 that have misconfigured sudoers files with wildcard paths.
4
What is a symlink attack in the context of CVE-2015-5602?
A symlink attack in CVE-2015-5602 involves tricking the sudoedit command to operate on a file that a local attacker can manipulate due to inadequate path handling.
5
Is CVE-2015-5602 a local or remote vulnerability?
CVE-2015-5602 is a local vulnerability, as it requires local user access to exploit.