It was discovered that there was a information disclosure vulnerability in
sudo
, a tool used to provide limited superuser privileges to specific users.
A local unprivileged user may have been able to perform arbitrary
directory-existence tests by exploiting a race condition in sudoedit
.