Privilege Escalation via Symlink Attack on CDE dtlogin in Caldera UnixWare 7.1.0

CVE-2002-0105

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

Learn more about our Cis Benchmark Audit For Operating Systems.