Lucene search
HistoryMar 21, 1999 - 5:00 a.m.
CVE-1999-0433
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0
Percentile
9.7%
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected configurations
Node
xfree86_projectx11r6Match3.3.3
Node
netbsdnetbsdMatch1.3.2
ORnetbsdnetbsdMatch1.3.3
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2i386
ORslackwareslackware_linuxMatch3.3
ORslackwareslackware_linuxMatch3.4
ORslackwareslackware_linuxMatch3.5
ORslackwareslackware_linuxMatch3.6
ORslackwareslackware_linuxMatch4.0
ORsusesuse_linuxMatch5.1
ORsusesuse_linuxMatch5.2
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xfree86_project | x11r6 | 3.3.3 | cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:* |
| netbsd | netbsd | 1.3.2 | cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:* |
| netbsd | netbsd | 1.3.3 | cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:* |
| redhat | linux | 5.1 | cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:* |
| redhat | linux | 5.2 | cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:* |
| slackware | slackware_linux | 3.3 | cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.4 | cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.5 | cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:* |
| slackware | slackware_linux | 3.6 | cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:* |
| slackware | slackware_linux | 4.0 | cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
X11R6 3.3.3 - Symlink
1999-03-21 00:00:00
cvelist
cvelist
CVE-1999-0433
1999-09-29 04:00:00
cve
cve
CVE-1999-0433
1999-09-29 04:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0
Percentile
9.7%
Related for NVD:CVE-1999-0433