Description
tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.
References
- 4003 vdb-entry
- 20020130 tac_plus version F4.0.4.alpha on at least Solaris 8 sparc mailing-list
- tacplus-insecure-accounting-files(8061) vdb-entry