Unscored CVE-2002-0105 EUVD-2002-0105GHSA-wv56-vjrw-54p2

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on …

Published Mar 15, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

References

3818 vdb-entry
20020108 CDE bug in Unixware 7.1 mailing-list
unixware-dtlogin-log-symlink(7864) vdb-entry