Description
The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
References
- 20050223 Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability third-party-advisory
- 57706 vendor-advisory