Lucene search
HistorySep 29, 1999 - 4:00 a.m.
CVE-1999-0433
cve-1999-0433
xfree86
startx
symlink attack
denial of service
restricted directories
gain privileges
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected configurations
Node
xfree86_projectx11r6Match3.3.3
Node
netbsdnetbsdMatch1.3.2
ORnetbsdnetbsdMatch1.3.3
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2i386
ORslackwareslackware_linuxMatch3.3
ORslackwareslackware_linuxMatch3.4
ORslackwareslackware_linuxMatch3.5
ORslackwareslackware_linuxMatch3.6
ORslackwareslackware_linuxMatch4.0
ORsusesuse_linuxMatch5.1
ORsusesuse_linuxMatch5.2
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| xfree86_project:x11r6 | xfree86 project x11r6 | eq | 3.3.3 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%
Related for CVE-1999-0433