CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

1998-12-18

Last modified

2024-08-01

Affected products

• Wordperfect (Corel)

References

• http://marc.info/?l=bugtraq&m=91404045014047&w=2