FlagShip (from Red Hat Application CD) is a Database Development System for xBase based applications on nearly all Unix brands. Problem: /usr/bin/FSserial is world-writeable! We can replace it with an trojan and trick root to execute it. OS affected: Red Hat 6.0.
19ec639c4df2decbde6f63cfae923d411bbd61a95d9c9e35e587b731bab241fe