CVE-2001-1092

Description

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.

Affected products

• compaq / tru644.0d – 4.0d
• compaq / tru644.0e – 4.0e
• compaq / tru644.0f – 4.0f
• compaq / tru644.0g – 4.0g

Exploits & proofs of concept

• exploit-dbDigital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Linkby seo

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/7102
• MISChttp://www.securityfocus.com/archive/1/213238
• MISChttp://www.kb.cert.org/vuls/id/440539
• MISChttp://www.securityfocus.com/bid/3320