Vulnerabilities > Todd Miller > Low

DATE CVE VULNERABILITY TITLE RISK
2005-06-20 CVE-2005-1993 Local Race Condition vulnerability in Todd Miller Sudo
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
local
high complexity
todd-miller
3.7
2005-05-02 CVE-2005-1119 Unspecified vulnerability in Todd Miller Sudo
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.
local
low complexity
todd-miller
2.1
2004-09-16 CVE-2004-1689 Information Disclosure vulnerability in Todd Miller Sudo 1.6.8
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.
local
low complexity
todd-miller
2.1
1999-06-08 CVE-1999-1496 Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
local
low complexity
todd-miller debian redhat
2.1