{"id":"CVE-2015-5602","aliases":["DEBIAN-CVE-2015-5602","DLA-382-1","DSA-3440-1","EUVD-2015-5556","GHSA-cxqf-2pgv-vx9p","MGASA-2015-0443","UBUNTU-CVE-2015-5602"],"status":"published","title":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a...","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01516,"percentile":0.74704,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2015-11-10T21:26:39Z","modified":"2026-09-09T06:47:28Z","exploits":[{"source":"exploitdb","id":"EDB-37710","title":"Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) - 'Sudoedit' Unauthorized Privilege Escalation","type":"local","platform":"linux","date":"2015-07-28","verified":true,"url":"https://www.exploit-db.com/exploits/37710"},{"source":"pocgithub","id":"cved-sources/cve-2015-5602","title":"cved-sources/cve-2015-5602","date":"2019-01-06","url":"https://github.com/cved-sources/cve-2015-5602"},{"source":"pocgithub","id":"t0kx/privesc-CVE-2015-5602","title":"t0kx/privesc-CVE-2015-5602","date":"2017-12-16","url":"https://github.com/t0kx/privesc-CVE-2015-5602"}],"fixes":[{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.8.15-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.8.15-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.8.15-1.1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"sudo","fixed_in":["1.7.4p4-2.squeeze.6"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"sudo","fixed_in":["1.8.5p2-1+nmu3+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sudo","fixed_in":["1.8.10p3-1+deb8u3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"sudo","fixed_in":["1.8.15-1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1.1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4p4-2.squeeze.6"}]}],"versions":["1.7.4p4-2.squeeze.1","1.7.4p4-2.squeeze.2","1.7.4p4-2.squeeze.3","1.7.4p4-2.squeeze.4","1.7.4p4-2.squeeze.5"]},{"source":"osv","ecosystem":"Debian:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5p2-1+nmu3+deb7u1"}]}],"versions":["1.8.5p2-1+nmu1","1.8.5p2-1+nmu2","1.8.5p2-1+nmu3"]},{"source":"osv","ecosystem":"Debian:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-1+deb8u3"}]}],"versions":["1.8.10p3-1+deb8u2"]},{"source":"osv","ecosystem":"Mageia:5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.15-1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6","1.8.9p5-1ubuntu1.5+esm7","1.8.9p5-1ubuntu1.5+esm8"]}],"products":[{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"http://bugzilla.sudo.ws/show_bug.cgi?id=707","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","evidence","report"]},{"url":"http://www.sudo.ws/stable.html#1.8.15","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"http://www.securitytracker.com/id/1034392","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.debian.org/security/2016/dsa-3440","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201606-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/37710/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","advisory","evidence","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5602"},{"url":"https://www.exploit-db.com/exploits/37710"},{"url":"https://github.com/advisories/GHSA-cxqf-2pgv-vx9p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5602","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0443.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17117","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-5602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5602","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5602","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:00:00Z","modified":"2024-08-06T06:50:03.159Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2015-5556","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:00:00Z","modified":"2024-08-06T06:50:03Z","updated_at":"2026-11-03T02:21:59.31515Z"}],"ghsa":[{"id":"GHSA-cxqf-2pgv-vx9p","title":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a...","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2022-05-17T03:27:05Z","modified":"2025-04-12T12:55:09Z","updated_at":"2026-11-02T15:01:24.694642Z"}],"nvd":[{"id":"CVE-2015-5602","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:59:10.187Z","modified":"2026-06-17T00:29:25.99Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"CVE-2015-5602","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:59:10Z","modified":"2026-04-16T06:23:17.552659388Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-5602","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:59:10.187Z","modified":"2026-09-09T06:47:28.293907549Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-382-1","title":"sudo - security update","status":"published","published":"2016-01-11T00:00:00Z","modified":"2026-03-09T01:21:21.411618Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-3440-1","title":"sudo - security update","status":"published","published":"2016-01-11T00:00:00Z","modified":"2026-03-09T01:20:58.423915Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0443","title":"Updated sudo packages fix security vulnerability","description":"An unauthorized privilege escalation was found in sudoedit in sudo before\n1.8.15 when a user is granted with root access to modify a particular file\nthat could be located in a subset of directories. It seems that sudoedit\ndoes not check the full path if a wildcard is used twice\n(e.g. /home/*/*/file.txt), allowing a malicious user to replace the\nfile.txt real file with a symbolic link to a different location\n(e.g. /etc/shadow), which results in unauthorized access (CVE-2015-5602).\n\nThe sudo package has been updated to version 1.8.15, which fixes this\nissue, and also includes many other bug fixes and changes.  See the\nupstream change log for details.\n","status":"published","published":"2015-11-10T21:26:39Z","modified":"2026-04-16T06:24:39.215674844Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"UBUNTU-CVE-2015-5602","description":"sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\"","status":"published","published":"2015-11-17T15:59:00Z","modified":"2025-09-08T16:43:26Z","updated_at":"2026-11-02T15:54:10.385269Z"}]}}