Lucene search
MitreCVE-1999-0433HistorySep 29, 1999 - 4:00 a.m.
CVE-1999-0433
1999-09-2904:00:00
mitre
web.nvd.nist.gov
39
cve-1999-0433
xfree86
startx
symlink attack
denial of service
restricted directories
gain privileges
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
High
EPSS
0
Percentile
9.7%
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected configurations
Node
xfree86_projectx11r6Match3.3.3
Node
netbsdnetbsdMatch1.3.2
ORnetbsdnetbsdMatch1.3.3
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2i386
ORslackwareslackware_linuxMatch3.3
ORslackwareslackware_linuxMatch3.4
ORslackwareslackware_linuxMatch3.5
ORslackwareslackware_linuxMatch3.6
ORslackwareslackware_linuxMatch4.0
ORsusesuse_linuxMatch5.1
ORsusesuse_linuxMatch5.2
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xfree86_project | x11r6 | 3.3.3 | cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:* |
| netbsd | netbsd | 1.3.2 | cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:* |
| netbsd | netbsd | 1.3.3 | cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:* |
| redhat | linux | 5.1 | cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:* |
| redhat | linux | 5.2 | cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:* |
| slackware | slackware_linux | 3.3 | cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.4 | cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.5 | cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.6 | cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:* |
| slackware | slackware_linux | 4.0 | cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-1999-0433
1999-03-21 05:00:00
exploitdb
exploitdb
X11R6 3.3.3 - Symlink
1999-03-21 00:00:00
cvelist
cvelist
CVE-1999-0433
1999-09-29 04:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
High
EPSS
0
Percentile
9.7%
Related for CVE-1999-0433