Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
Software | From | Fixed in |
---|---|---|
todd_miller / sudo | 1.5 | 1.5.x |
debian / debian_linux | 2.1 | 2.1.x |
redhat / linux | 6.0 | 6.0.x |