cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
U2_universe | Ibm | * | 10.0.0.9 |