uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.
Software | From | Fixed in |
---|---|---|
ian_lance_taylor / taylor_uucp | 1.0.6 | 1.0.6.x |