sudo contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue can be triggered by a user who already has some kind of sudo access, and they can leverage sudo to run arbitrary commands as other users. This flaw will most likely lead to a root compromise.
Local Access Required
Loss of Integrity
Patch / RCS
Upgrade to version 1.6.8 patchlevel 9 or higher, as it has been reported to fix this vulnerability. A workaround can be achieved if care is taken in the order of the lines in the sudoers file. Entries with ALL should come after all other entries.