CVE-2004-1689

EPSS 0.17%
Published: 9/16/2004Modified: 4/28/2026

Description

sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.

Affected packages (1)

References (1)