Vulnerability in Todd Miller Sudo
CVE-1999-1496
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
EPSS: 0.005 (40.8th percentile) — read the EPSS interpretation.
Affected products
- Todd_miller Sudo — versions 1.5
- Debian Debian_linux — versions 2.1
- Redhat Linux — versions 6.0
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)