Description
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
References
- macos-core-files-symlink(13542) vdb-entry
- 8917 vdb-entry
- A102803-1 vendor-advisory
- 8914 vdb-entry