sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.Referenceshttp://marc.info/?l=bugtraq&m=88465708614896&w=2