CVE-1999-1038
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Jun 26, 1998
Updated: Nov 20, 2024
Summary
CVE-1999-1038 is a vulnerability affecting Tiger version 2.2.3, where local users can manipulate symlinks to overwrite arbitrary files in the system's default working directory. This issue arises due to insufficient validation checks on temporary files, allowing malicious users to create symbolic links that point to sensitive files, effectively replacing them with their own data. The potential impact includes data loss and unauthorized file modification, making this a significant security concern.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- TAMU