CVE-1999-1210

Summary

CVE-1999-1210 is a vulnerability affecting the xterm application in Digital UNIX 4.0B with patch kit 5. This issue enables local users to overwrite arbitrary files through a symlink attack on core dump files. The vulnerability arises when xterm is launched with a DISPLAY environmental variable set to an unreachable display. Despite being unable to access the display, xterm still generates a core dump file, which can be manipulated by attackers to write to files of their choice.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.