CVE-1999-0787
CVSS 2.0 Score 2.1 of 10 (low)
Details
Summary
CVE-1999-0787 is a vulnerability affecting the SSH authentication agent. It allows an attacker to follow symlinks via a UNIX domain socket, potentially gaining access to the authentication agent's data or even impersonating a legitimate user. An attacker could manipulate the symlink to redirect the connection to an unintended socket, bypassing security measures and compromising the integrity of the authentication process. This issue was identified in 1999 and poses a significant risk to systems utilizing the SSH authentication agent with symlinks in their environment. System administrators are advised to take appropriate measures, such as disabling symlink following for UNIX domain sockets, to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SSH