Description
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | sudo | 1.7.2p1-14.el5_8.2 | RHSA-2012:1149 |
Advisories 1
- RHSA-2012:1149 Red Hat Security Advisory: sudo security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026