Description (CNA)
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
- http://www.securityfocus.com/bid/31
- http://www.osvdb.org/8106
- http://www.iss.net/security_center/static/7160.php
- http://www.cert.org/advisories/CA-91.20.rdist.vulnerability
ADP enrichment
No English description supplied.