Description
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
References
- 19940720 xnews and XDM mailing-list
- 358 vdb-entry