medium4.6Public exploit code
CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- X11R6 3.3.3 - Symlink1999-03-21 · local · linux · Verified
Impact
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xfree86 Project | X11r6 | Version 3.3.3 |
| Netbsd | Netbsd | Versions 1.3.2, 1.3.3 |
| Redhat | Linux | Versions 5.1, 5.2 |
| Slackware | Slackware Linux | Versions 3.3, 3.4, 3.5, 3.6, 4.0 |
| Suse | Suse Linux | Versions 5.1, 5.2, 6.0, 6.1 |