CVE-1999-1210
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Nov 12, 1997
Updated: Dec 19, 2017
Summary
CVE-1999-1210 is a vulnerability affecting the xterm application in Digital UNIX 4.0B with patch kit 5. This issue enables local users to overwrite arbitrary files through a symlink attack on core dump files. The vulnerability arises when xterm is launched with a DISPLAY environmental variable set to an unreachable display. Despite being unable to access the display, xterm still generates a core dump file, which can be manipulated by attackers to write to files of their choice.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Digital Unix
Affected Vendors
- Compaq