EUVD-1999-0836

Malware in sbrugna...

EUVD-1999-0838

Malware in sbrugna...

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

FreeBSD 3.3 - 'gdc' Symlink

source: https://www.securityfocus.com/bid/835/info It is possible to write debug ouput from gdc to a file /var/tmp/gdbdump. Unfortunately, gdc follows symbolic links which can be created in tmp and will overwrite any file on the system thanks to it being setiud root. This does not cause any...