CVE-1999-0446

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Apr 12, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-04474.6Local users can gain privileges using the debug utility in the MPE/iX operating system.CVE-1999-04485.0IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request CVE-1999-04497.8The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsea CVE-1999-04507.5In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).CVE-1999-04512.1Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.CVE-1999-045210.0A service or application has a backdoor password that was placed there by the developer.CVE-1999-04535.0An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).CVE-1999-045410.0A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such CVE-1999-04557.5The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, wh CVE-1999-04577.2Linux ftpwatch program allows local users to gain root privileges.CVE-1999-04582.1L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.CVE-1999-04594.6Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.