Description
The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack.
References
- tru64-dupatch-setld-symlink(11892) vdb-entry
- 7452 vdb-entry
- SSRT3471 vendor-advisory