scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openserver | Caldera | 5.0.5 (including) | 5.0.5 (including) |
| Openserver | Caldera | 5.0.6 (including) | 5.0.6 (including) |
References
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt
- http://marc.info/?l=bugtraq\u0026m=99057164129869\u0026w=2
- http://www.iss.net/security_center/static/9210.php
- http://www.securityfocus.com/bid/4875
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt
- http://marc.info/?l=bugtraq\u0026m=99057164129869\u0026w=2
- http://www.iss.net/security_center/static/9210.php
- http://www.securityfocus.com/bid/4875