Description
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.
References
- 6437 vdb-entry
- 20001212 Two Holes in Sun Cluster 2.x mailing-list
- ha-nfs-symlink(6125) vdb-entry