NetSight
IP …
high7.2Public exploit code

CVE-1999-0689

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

Affected products

VendorProductAffected versions
CdeCde
Versions 1.0.1, 1.0.2, 1.1, 1.2, 2.0, 2.1
SunSolaris
Versions 2.5, 2.5.1, 2.6, 7.0
SunSunos
All versions
Versions 5.5, 5.5.1, 5.7

References