The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Hp-ux | Hp | 11.00 (including) | 11.00 (including) |