CVE-1999-1499

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on 1 nameddump.db when root kills the process with a SIGINT, or 2 named.stats when SIGIOT is used...

CVE-1999-1187

Pine mail client (before version 3.94) is affected by a local privilege escalation vulnerability where a symlink attack on the mail-notification lockfile is exploitable when a user receives new mail. The underlying issue is a symlink attack allowing a local user to gain privileges. There is no ex...

CVE-1999-1459

CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...

CVE-1999-1210

Affected software: xterm on Digital UNIX 4.0B with patch kit 5. The vulnerability arises from a symlink attack on a core-dump file created when xterm is invoked with DISPLAY set to an inaccessible display. Local attackers can use this to overwrite arbitrary files. The description does not provide...

CVE-1999-1541

shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file...

CVE-1999-1286

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file...

CVE-1999-1210

xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...

CVE-1999-1495

xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file...

CVE-1999-1398

The CVE-1999-1398 vulnerability affects the xfsdump utility on SGI IRIX and could allow local users to gain root privileges via the bck.log file, potentially through a symlink attack. The provided documents do not specify exact affected IRIX versions, exploit details, or a patch/remediation. Expl...

CVE-1999-1498

Slackware Linux 3.4 pkgtool is affected by a local vulnerability where a symlink attack on the reply file allows reading and writing to arbitrary files. Root cause: symlink manipulation enabling unintended access. Impact per the description: partial confidentiality and partial integrity; availabi...

CVE-1999-1244

CVE-1999-1244 affects IPFilter versions 3.2.3–3.2.10. The flaw arises from a symlink attack on the saved output file, enabling local users to modify arbitrary files. The impact is described as full confidentiality, integrity, and availability effects in the source data. No remediation or exploit ...

CVE-1999-1026

CVE-1999-1026 affects aspppd on Solaris 2.5 x86. The vulnerability arises from a symlink attack on the temporary file /tmp/.asppp.fifo, enabling local users to modify arbitrary files and escalate to root privileges. Exploitation details are not provided beyond the described symlink surface, and t...

CVE-1999-1398

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack...

CVE-1999-1410

addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file...

CVE-1999-1388

passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument...

CVE-1999-1480

Technical details on CVE-1999-1480 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are described here. Monitor for updates.

CVE-1999-1244

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file...

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...

CVE-1999-1221

The CVE-1999-1221 vulnerability affects Digital Unix (OSF/1) 3.x, where local users can modify arbitrary files via a symlink attack on the dxchpwd.log file. The provided documents describe the affected product and the underlying cause as a symlink attack, but do not include details on exploitatio...

CVE-1999-1388

The CVE-1999-1388 entry concerns SunOS 4.1.x, where the passwd utility is vulnerable to a local symlink attack via the -F command line argument. This allows local users to overwrite arbitrary files, due to the underlying symlink race condition in passwd. The affected component is the passwd progr...