Description
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
References
- 20010110 Immunix OS Security update for lots of temp file problems mailing-list
- shadow-utils-useradd-symlink(5927) vdb-entry
- MDKSA-2001:007 vendor-advisory
- 2196 vdb-entry