CVE-1999-0433

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

1999-03-21

Last modified

2024-08-01

Affected products

• Netbsd (Netbsd)
• Linux (Redhat)
• Slackware Linux (Slackware)
• Suse Linux (Suse)
• X11r6 (Xfree86 Project)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433