CVE-1999-0434

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Mar 30, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0434 is a vulnerability affecting the XFree86 xfs command. Maliciously crafted symlinks can be used by local attackers to create files in restricted directories, potentially granting them escalated privileges or causing a denial of service. This issue poses a significant security risk, particularly for systems where the XFree86 software is in use. Users are advised to apply appropriate patches as soon as possible to mitigate the danger.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Debian
  • NetBSD
  • Red Hat Enterprise Linux
  • SUSE Linux Enterprise Server

Affected Vendors

  • Debian
  • Red Hat
  • SUSE Linux GmbH
  • Netbsd