CVE-1999-0836

This exploit leverages a symlink attack in SCO UnixWare's /usr/bin/uidadmin to overwrite /etc/security/tcb/privs, adding a malicious binary to the privileged programs list. After reboot, the binary grants a root shell by exploiting the dacwrite privilege.