Description
pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
References
- 1016416 vdb-entry
- 102496 vendor-advisory
- 1016312 vdb-entry
- iplanet-msgconf-symlink(27220) vdb-entry
- ADV-2006-2633 vdb-entry
- 20060614 Sun iPlanet Messaging Server 5.2 root password compromise mailing-list
- 18749 vdb-entry
- 20919 third-party-advisory