Description
smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT.
References
- http://www.securiteam.com/unixfocus/6K00S203FC.html
- sun-smcboot-tmp-symlink(7756) vdb-entry
- 3763 vdb-entry