Description
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.
References
- kashare-xkas-icon-symlink(8002) vdb-entry
- 20020128 [ Hackerslab bug_paper ] Xkas application vulnerability mailing-list
- 3969 vdb-entry