CVE-2008-6559 Information

Description

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Reference

ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt http://secunia.com/advisories/30921 http://www.osvdb.org/51234 http://www.securityfocus.com/bid/28625 https://www.exploit-db.com/exploits/5357