Vulnerability in Cde

CVE-1999-0689

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

EPSS: 0.008 (51.8th percentile) — read the EPSS interpretation.

Affected products

  • Cde — versions 1.0.1, 1.0.2, 1.1
  • Sun Solaris — versions 2.5, 2.5.1, 2.6
  • Sun Sunos — versions 5.5, 5.5.1, 5.7
  • N/a — versions n/a

References