Description
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
References
- 19991005 Cactus Software's shell-lock mailing-list
- 19991004 vendor-advisory
- cactus-shell-lock-root-privs(3358) vdb-entry