CVE-1999-1221

Description

dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.

Affected products

• digital / unix3 – 3

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=87602167420141&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/399