Description
libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.
References
- 1446 vdb-entry
- FreeBSD-SA-00:24 vendor-advisory
- 1437 vdb-entry