Digital Unix MSGCHK MH_PROFILE Symbolic Link Vulnerability

Bugtraq ID:	3320
Class:	Access Validation Error
CVE:	CVE-2001-1092
Remote:	No
Local:	Yes
Published:	Sep 10 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	This vulnerability was announced via the Bugtraq mailing list by Seunghyun Seo <[email protected]> on September 10, 2001.
Vulnerable:	Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g Digital (Compaq) TRU64/DIGITAL UNIX 4.0 f Digital (Compaq) TRU64/DIGITAL UNIX 4.0 e Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d
Not Vulnerable:

Digital Unix MSGCHK MH_PROFILE Symbolic Link Vulnerability

The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege.

Because msgchk fails to check file permissions before opening user configuration files in the user's home directory, a symbolic link to a target file can permit a local user to read the first line of data contained in any file readable by the msgchk user. Where msgchk is run setuid root, this allows limited information to be read from any file on the host.

Digital Unix MSGCHK MH_PROFILE Symbolic Link Vulnerability

msgchkx.sh courtesy SeungHyun Seo <[email protected]>

• /data/vulnerabilities/exploits/msgchkx.sh

Digital Unix MSGCHK MH_PROFILE Symbolic Link Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Digital Unix MSGCHK MH_PROFILE Symbolic Link Vulnerability

References: