CVE-2003-0877

Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory...

CVE-2003-0877

Mac OS X prior to 10.3 with core files enabled is vulnerable to a local symlink attack in /cores that can cause arbitrary file overwrite and core file disclosure. The core files are created with predictable names (core.PID), owned by root and 0400 by default, and the /cores directory is world-wri...