CVE-1999-0433

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Mar 21, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-04347.5XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing the CVE-1999-04357.2MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.CVE-1999-04364.6Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.CVE-1999-04375.0Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.CVE-1999-04385.0Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.CVE-1999-04397.5Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc config CVE-1999-04407.5The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-04415.0Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.CVE-1999-04422.1Solaris ff.core allows local users to modify files.CVE-1999-044310.0Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.CVE-1999-04445.0Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each pac CVE-1999-04455.0In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.