CVE-2000-0154

low1.2Public exploit code

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

SCO Unixware 7.1/7.1.1 - ARCserver /tmp Symlink2000-02-15 · local · sco · Verified

Impact

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.

Affected products

Vendor	Product	Affected versions
Sco	Unixware	Versions 7.1, 7.1.1