Description
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
References
- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
- 31 vdb-entry
- 8106 vdb-entry
- rdist-popen-gain-privileges(7160) vdb-entry
- CA-91.20 third-party-advisory