LinuxSecurity.com: The secure path feature and group handling in sudo allow localattackers to escalate privileges.

More...