CVE-2004-1689: Todd Miller Sudo

Low severity, CVSS 2.1. EPSS: 1.2% chance of exploitation in the next 30 days.

sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.

Affected products

• Todd Miller Sudo: version 1.6.8 only

Published 2004-09-16. Last modified 2026-06-16.