Description
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
References
- 19990608 unneeded information in sudo mailing-list
- 321 vdb-entry
- sudo-file-exists(2277) vdb-entry