CVE-2008-6559

CVE-2008-6559

EPSS 0.8%

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt http://secunia.com/advisories/30921 https://www.exploit-db.com/exploits/5357 http://www.osvdb.org/51234 http://www.securityfocus.com/bid/28625