CVE-1999-0433

CVSS 2.0 Score 4.6 of 10 (medium)

Details

Published Mar 21, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0433 refers to a vulnerability in the XFree86 startx command. This issue allows local users to conduct symlink attacks, leading them to create files in restricted directories. This potentially grants them elevated privileges or causes a denial of service. The vulnerability arises due to the lack of proper input validation by the XFree86 startx command when handling symlinks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SUSE Linux Enterprise Server
  • NetBSD
  • Red Hat Enterprise Linux

Affected Vendors

  • Red Hat
  • SUSE Linux GmbH
  • Netbsd