Description
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
References
- sun-su-path(7480) vdb-entry
- 1121935 issue-tracking