sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by /home/*/*/file.txt. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5602
