Secunia

Simon Roses Femerling has reported a vulnerability in UnixWare, which can be exploited by malicious, local users to break out of the chroot jail.

The vulnerability is caused due to some errors in the implementation of the "chroot()" security feature. This can be exploited to break out of the chroot restriction and access arbitrary files on the file system.

NOTE: Exploit code is publicly available.

Solution
-- UnixWare 7.1.4 --
Further details available in Customer Area

Provided and/or discovered by
Simon Roses Femerling

Original Advisory
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt

Deep Links
Links available in Customer Area