2002-03-09 05:00:00
mitre
PUBLISHED
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named cookies via a symlink attack.