EIP-2026-114761

This exploit leverages a symlink race condition in Digital UNIX 4.0 where two setuid programs dumping core in succession can create a root-owned file with user-controlled content. The PoC demonstrates creating a /.rhosts file owned by root, enabling unauthorized root login via rlogin.