Lucene search
HistoryMar 21, 1999 - 5:00 a.m.
CVE-1999-0433
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected configurations
Node
xfree86_projectx11r6Match3.3.3
Node
netbsdnetbsdMatch1.3.2
ORnetbsdnetbsdMatch1.3.3
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2i386
ORslackwareslackware_linuxMatch3.3
ORslackwareslackware_linuxMatch3.4
ORslackwareslackware_linuxMatch3.5
ORslackwareslackware_linuxMatch3.6
ORslackwareslackware_linuxMatch4.0
ORsusesuse_linuxMatch5.1
ORsusesuse_linuxMatch5.2
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%
Related for NVD:CVE-1999-0433