Kloxo HostInABox 575 - local user symlink attack



DESCRIPTION


When changing ownership of a domain, a symlink attack can be used to take control of any file on the box.



IMPACT


Local users could obtain root privileges. I don't remember the exact details of this issue.