cve/2015/CVE-2015-5602.md

CVE-2015-5602

Description

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home///file.txt."

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• https://www.exploit-db.com/exploits/37710/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/GhostTroops/TOP
• https://github.com/JERRY123S/all-poc
• https://github.com/cved-sources/cve-2015-5602
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/hktalent/TOP
• https://github.com/jbmihoub/all-poc
• https://github.com/seeu-inspace/easyg
• https://github.com/t0kx/privesc-CVE-2015-5602
• https://github.com/weeka10/-hktalent-TOP