CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Unixware | Caldera | 7.1.0 (including) | 7.1.0 (including) |