CVE-2005-1119: Todd Miller Sudo

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

Affected products

• Todd Miller Sudo: version 1.5.6 only; version 1.5.7 only; version 1.5.8 only; version 1.5.9 only; version 1.6 only; version 1.6.1 only; …

Published 2005-05-02. Last modified 2026-06-16.