CVE-1999-0434

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 30, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04357.2MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.CVE-1999-04364.6Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.CVE-1999-04375.0Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.CVE-1999-04385.0Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.CVE-1999-04397.5Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configCVE-1999-04407.5The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-04415.0Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.CVE-1999-04422.1Solaris ff.core allows local users to modify files.CVE-1999-044310.0Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.CVE-1999-04445.0Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each pacCVE-1999-04455.0In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.CVE-1999-04462.1Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, t