CVE-1999-0689
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Sep 13, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0689 is a vulnerability affecting the CDE dtspcd daemon. This issue allows local users to execute arbitrary commands by exploiting a symlink vulnerability in the daemon. By creating a symbolic link to a malicious file or directory, an attacker can manipulate the daemon into executing unintended commands, potentially leading to system compromise. This vulnerability underscores the importance of properly managing symbolic links and securing daemons against local attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Sun Solaris
- SunOS
Affected Vendors
- Oracle Corp
- Sun.