CVE-1999-0988

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Dec 4, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0988 is a vulnerability affecting UnixWare's pkgtrans package manager. This issue permits local users to read sensitive files by creating symbolic links to arbitrarily chosen locations. An attacker can exploit this weakness to gain unauthorized access to critical system information, potentially leading to significant security risks. The vulnerability was discovered in 1999 and may still pose a threat to systems that have not been updated or patched. It is crucial for UnixWare users to apply the available security patch to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SCO UnixWare

Affected Vendors

  • California State Controller’s Office