Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1092. PoCs published by seo.
AI-analyzed exploit summary This exploit leverages a symbolic link attack against the msgchk utility in Digital Unix to read the first line of any file readable by the msgchk user, potentially escalating privileges if msgchk is setuid root.
Description
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by seo · bashlocalunix
https://www.exploit-db.com/exploits/21107
This exploit leverages a symbolic link attack against the msgchk utility in Digital Unix to read the first line of any file readable by the msgchk user, potentially escalating privileges if msgchk is setuid root.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Digital Unix msgchk utility
No auth needed
Prerequisites:
Local access to the system · msgchk utility installed · msgchk setuid root for privilege escalation
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/7102
Exploit, Vendor Advisory mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/213238
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/440539
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/3320
Scores
EPSS
0.0111
EPSS Percentile
61.6%
Details
Status
published
Products (4)
compaq/tru64
4.0d
compaq/tru64
4.0e
compaq/tru64
4.0f
compaq/tru64
4.0g
Published
Sep 10, 2001
Tracked Since
Feb 18, 2026