Description
xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.
References
- 4197 vdb-entry
- 20020227 Remote exploit against xtelld and other fun mailing-list
- xtell-log-symlink(8314) vdb-entry
- DSA-121 vendor-advisory