CVE Catalog

CVE-2005-1119

Low
Published: Translated: NVD NIST

Summary

Sudo VISudo version 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

Risk Assessment

The risk involves the possibility of overwriting or corrupting critical system files by an unauthorized local user, potentially leading to system integrity compromise.

Recommendation

Update Sudo to a version later than 1.6.8, which includes a fix to protect against symlink attacks on temporary files.

Original NVD description (English source)

Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS