Lucene search
HistoryMar 30, 1999 - 5:00 a.m.
CVE-1999-0434
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
71.2%
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected configurations
Node
calderaopenlinuxMatch1.2
ORdebiandebian_linuxMatch2.0
ORdebiandebian_linuxMatch2.0r5
ORdebiandebian_linuxMatch2.1
ORnetbsdnetbsdMatch1.3.3
ORredhatlinuxMatch5.1
ORsusesuse_linuxMatch5.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| caldera | openlinux | 1.2 | cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:* |
| debian | debian_linux | 2.0 | cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:* |
| debian | debian_linux | 2.0 | cpe:2.3:o:debian:debian_linux:2.0:r5:*:*:*:*:*:* |
| debian | debian_linux | 2.1 | cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:* |
| netbsd | netbsd | 1.3.3 | cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:* |
| redhat | linux | 5.1 | cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:* |
| suse | suse_linux | 5.3 | cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:* |
References
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
71.2%
Related for NVD:CVE-1999-0434