sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Aix | Ibm | 4.1 (including) | 4.1 (including) |
Aix | Ibm | 4.1.1 (including) | 4.1.1 (including) |
Aix | Ibm | 4.1.2 (including) | 4.1.2 (including) |
Aix | Ibm | 4.1.3 (including) | 4.1.3 (including) |
Aix | Ibm | 4.1.4 (including) | 4.1.4 (including) |
Aix | Ibm | 4.1.5 (including) | 4.1.5 (including) |
Aix | Ibm | 4.2 (including) | 4.2 (including) |
Aix | Ibm | 4.2.1 (including) | 4.2.1 (including) |
Aix | Ibm | 4.3 (including) | 4.3 (including) |