info
discussion
exploit
solution
references
Slackware PATH Environment Variable Vulnerability
Solution:
Edit the /etc/profile and /etc/csh.login scripts and remove the '.' and /usr/andrew/bin directory entries.
Privacy Statement
Copyright 2010, SecurityFocus