Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
NVD-CWE-Other