CVE-2015-5602

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.46% chance of exploitation in the next 30 days, 72th percentile

Published

2015-11-17

Updated

2024-08-06

Proof-of-concept exploits (2)

• cved-sources/cve-2015-56020★ · 2021-04-15
• t0kx/privesc-CVE-2015-560215★ · 2017-12-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37710

References

• CVE Record
• NVD entry

Related

• CVE-2010-0426
• CVE-2015-1427
• CVE-2015-3306
• CVE-2016-9920
• CVE-2015-5599
• CVE-2015-5603