Exploitation Summary
EIP tracks 3 public exploits for CVE-2015-5602. PoCs published by daniel svartman, t0kx, cved-sources.
AI-analyzed exploit summary This writeup describes a privilege escalation vulnerability in sudoedit (CVE-2015-5602) where wildcard path handling allows symbolic link manipulation to access unauthorized files like /etc/shadow. The exploit leverages improper path validation when wildcards are used twice in the sudoers configuration.
Description
sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."
Exploits (3)
This writeup describes a privilege escalation vulnerability in sudoedit (CVE-2015-5602) where wildcard path handling allows symbolic link manipulation to access unauthorized files like /etc/shadow. The exploit leverages improper path validation when wildcards are used twice in the sudoers configuration.
This exploit leverages a symlink attack in sudoedit (CVE-2015-5602) to manipulate the /etc/shadow file and change the root password, achieving local privilege escalation. The PoC creates a malicious EDITOR script to modify the shadow file when sudoedit is invoked with a wildcard path.
This repository is a stub for CVE-2015-5602, referencing a Docker container management tool (Cved) and an external GitHub repository for the actual exploit. No exploit code is present in the provided files.