CVE-2004-0233
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names …
Published: 2004-05-05 · CVSS: Unscored
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7