Description
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
Affected products
- sco / unixware7.0 – 7.0
- sco / unixware7.0.1 – 7.0.1
- sco / unixware7.1 – 7.1
Exploits & proofs of concept
- exploit-dbSCO Unixware 7.1 - '/var/mail' Permissionsby Brock Tellier
References
Updated 22m ago · 8 sources