CVE-2015-5602

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugzilla.sudo.ws/show_bug.cgi?id=707Exploit, Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3440
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1034392
http://www.sudo.ws/stable.html#1.8.15Release Notes, Vendor Advisory
https://security.gentoo.org/glsa/201606-13Third Party Advisory
https://www.exploit-db.com/exploits/37710/Exploit, Third Party Advisory
http://bugzilla.sudo.ws/show_bug.cgi?id=707Exploit, Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3440
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1034392
http://www.sudo.ws/stable.html#1.8.15Release Notes, Vendor Advisory
https://security.gentoo.org/glsa/201606-13Third Party Advisory
https://www.exploit-db.com/exploits/37710/Exploit, Third Party Advisory

Timeline

Published: Nov 17, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-56036.5The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecifie CVE-2015-56055.0The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote CVE-2015-56067.5Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted reque CVE-2015-56078.8Cross-site request forgery in the REST API in IPython 2 and 3.CVE-2015-56086.1Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1.CVE-2015-56099.1Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary file CVE-2015-56104.0The RSM (aka RSMWinService) service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different CVE-2015-56118.3Unspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler Automobiles (FCA) from 2013 to 2015 models, allows re CVE-2015-56124.3Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML CVE-2015-56135.4Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML CVE-2015-56179.8SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbi CVE-2015-56187.5Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) V