Description
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
References
- http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info
- IX75554 vendor-advisory
- IX76330 vendor-advisory
- 408 vdb-entry
- aix-sadc-timex(7675) vdb-entry
- IX76853 vendor-advisory