CVE-1999-0836

Description

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

Affected products

• sco / unixware7.0 – 7.0
• sco / unixware7.0.1 – 7.0.1
• sco / unixware7.1 – 7.1
• sco / unixware7.1.1 – 7.1.1

Exploits & proofs of concept

• exploit-dbSCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'uidadmin' Local Privilege Escalationby Brock Tellier

References

• MISCftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net
• MISChttp://www.securityfocus.com/bid/842