Security Advisory
CVE-2000-1012
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.