First published: Mon Dec 27 1999(Updated: )
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xinuos UnixWare | =7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0029 is considered a local privilege escalation vulnerability.
To fix CVE-2000-0029, users should apply patches provided by the vendor for UnixWare 7.1.
CVE-2000-0029 affects local users of SCO UnixWare 7.1 who can leverage the vulnerable pis and mkpis commands.
CVE-2000-0029 is associated with a symlink attack allowing local users to gain elevated privileges.
As a workaround for CVE-2000-0029, limit access to the pis and mkpis commands to trusted users only.