Lucene search
HistoryOct 06, 1997 - 4:00 a.m.
CVE-1999-1095
cve-1999-1095
security vulnerability
temporary files
symbolic links
user modifications
writable files
updatedb
nvd
7.2 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:linux | redhat linux | eq | 4.1 |
| slackware:slackware_linux | slackware slackware linux | eq | 3.3 |
7.2 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%