Security Advisory
CVE-2001-0529
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.