CVE:CVE-2004-0233
CNNVD:CNNVD-200408-197
Utempter允许包含..（点 点）目录遍历序列的设备名称，本地用户可以通过在与信任utmp或者wtmp文件的应用程序相组合的设备名称上的链接攻击覆盖任意文件。
solution:Upgrade sgi propack to a higher version than 2.4,3.0,and avoid the version 2.4,3.0; Upgrade utempter utempter to a higher version than 0.5.2,0.5.3,and avoid the version 0.5.2,0.5.3; Upgrade slackware slackware_linux to a higher version than *,9.1,and avoid the version 9.1