## Description

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### todd_miller - sudo

Affected Versions:

- 1.5

### debian - debian_linux

Affected Versions:

- 2.1

### redhat - linux

Affected Versions:

- 6.0

## References

- http://www.securityfocus.com/archive/1/14665
  Exploit Vendor Advisory
- http://www.securityfocus.com/bid/321
  Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2277
- http://www.securityfocus.com/archive/1/14665
  Exploit Vendor Advisory
- http://www.securityfocus.com/bid/321
  Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2277

Neural Processor Active