CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/3818 | Vendor Advisory |
http://www.iss.net/security_center/static/7864.php | Vendor Advisory |
http://marc.info/?l=bugtraq&m=101060400802428&w=2 |
Configurations
Information
Published : 2002-03-24 21:00
Updated : 2016-10-17 19:16
NVD link : CVE-2002-0105
Mitre link : CVE-2002-0105
JSON object : View
CWE
Products Affected
caldera
- unixware