CVE-2005-1993

Publication date 20 June 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
sudo 7.04 feisty
Fixed 1.6.8p12-1ubuntu6
6.10 edgy
Fixed 1.6.8p12-1ubuntu6
6.06 LTS dapper
Fixed 1.6.8p12-1ubuntu6

References

Related Ubuntu Security Notices (USN)

Other references