Anatomy of a bug – the five minute insecurity window in the sudo command
An authentication-related bug was patched recently in the Unix sudo command.
Ironically, the bug was more likely to affect those users who were more security-conscious.
Paul Ducklin explains…
Story added 7. March 2013, content source with full text you can find at link above.