Vulnerability in Netbsd
CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
EPSS: 0.007 (49.9th percentile) — read the EPSS interpretation.
Affected products
- Netbsd — versions 1.3.2, 1.3.3
- Slackware Slackware_linux — versions 3.3, 3.4, 3.5
- Xfree86_project X11r6 — versions 3.3.3
- Redhat Linux — versions 5.1, 5.2
- Suse Suse_linux — versions 5.1, 5.2, 6.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)