Lucene search
HistorySep 29, 1999 - 4:00 a.m.
CVE-1999-0446
cve-1999-0446
denial of service
netbsd 1.3.3
vfs bug
symbolic link
ln command
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%
Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
Affected configurations
Node
netbsdnetbsdMatch1.3.1
ORnetbsdnetbsdMatch1.3.2
ORnetbsdnetbsdMatch1.3.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbsd:netbsd | netbsd | eq | 1.3.1 |
| netbsd:netbsd | netbsd | eq | 1.3.2 |
| netbsd:netbsd | netbsd | eq | 1.3.3 |
References
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%
Related for CVE-1999-0446