Vulnerability in Rtin

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.

EPSS: 0.013 (67.1th percentile) — read the EPSS interpretation.

Affected products

  • Rtin
  • Tin — versions 1.2
  • N/a — versions n/a

References