• info
• discussion
• exploit
• solution
• references

Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability

Todd Miller 'sudo' is prone to a local privilege-escalation vulnerability because it fails to correctly handle the 'sudoedit' command.

Local attackers could exploit this issue to run arbitrary commands as the 'root' user. Successful exploits can completely compromise an affected computer.

This issue affects 'sudo' 1.6.9 through 1.7.2p3.