CVE-2001-1092

CVE-2001-1092 concerns msgchk in Digital UNIX 4.0G and earlier that allows a local user to read the first line of arbitrary files by a symlink attack on the user’s .mh_profile. The root cause is msgchk reads the profile to obtain configuration options, and if linked to a target file readable by t...

CVE-2001-1092

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mhprofile file...