CVE-2001-1092 msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
LowCVSS 2.1
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compaq tru64 | = 4.0d | No fix listed |
| compaq tru64 | = 4.0e | No fix listed |
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 4.0g | No fix listed |
References
- VU#440539 third-party-advisory us-government-resource
- 20010910 Digital Unix 4.0x msgchk multiple vulnerabilities exploit mailing-list vendor-advisory
- 3320 exploit vdb-entry vendor-advisory
- du-msgchk-symlink(7102) vdb-entry