CVE-1999-0786

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Sep 22, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-07872.1The SSH authentication agent follows symlinks via a UNIX domain socket.CVE-1999-07885.0Arkiea nlservd allows remote attackers to conduct a denial of service.CVE-1999-078910.0Buffer overflow in AIX ftpd in the libc library.CVE-1999-07902.6A remote attacker can read information from a Netscape user's cache via JavaScript.CVE-1999-079110.0Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the systeCVE-1999-07932.6Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.CVE-1999-07944.6Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.CVE-1999-08005.0The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.CVE-1999-080110.0BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.CVE-1999-08027.6Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.CVE-1999-08032.1The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.CVE-1999-08045.0Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
CVE-1999-0786: Medium severity, CVSS 4.6 | Vulnix