CVE-1999-1496

Description

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.

Severity

Overall Severity: N/A

CVSS Metrics

Type	Score	Severity	Vector

Affected Products

References

• http://www.securityfocus.com/archive/1/14665
  ExploitVendor Advisory
• http://www.securityfocus.com/bid/321
  Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2277
• http://www.securityfocus.com/archive/1/14665
  ExploitVendor Advisory
• http://www.securityfocus.com/bid/321
  Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2277