CVE-2005-1993: Todd Miller Sudo

Low severity, CVSS 3.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.

Affected products

• Todd Miller Sudo: version 1.3.1 only; version 1.5.6 only; version 1.5.7 only; version 1.5.8 only; version 1.5.9 only; version 1.6 only; …

Published 2005-06-20. Last modified 2026-06-16.