CVE-2005-1993

Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.

Date published : 2005-06-20

http://docs.info.apple.com/article.html?artnum=302847

http://www.securityfocus.com/bid/13993