SCO OpenServer/UnixWare vi creates temporary files insecurely

Overview The implementation of vi, a text editor, provided with SCO Openunix creates insecure temporary files with predictable names. Using a symbolic link attack, an intruder can overwrite any file writable by the user of vi. Description vi is a screen-oriented text editor. The implementation...

[SRT2001-09] - vi and crontab -e /tmp issues

====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-9 Topic: vi and crontab -e /tmp issues Vendor: Santa Cruz Operations Release Date: 05/07/01 ====================================================================== .:...

CVE-1999-0132

CVE-1999-0132 describes a local privilege escalation in Expreserve used by vi and ex, where local users can overwrite arbitrary files and gain root access. The connected documents confirm the affected components (vi/ex and Expreserve) and the outcome, but do not provide the underlying root cause ...

CVE-1999-0132

Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access...