low2.1Public exploit code
CVE-1999-1499
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) n…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ISC BIND 4.9.7 -T1B - named SIGINT / SIGIOT Symlink1998-04-10 · local · linux · Verified
Impact
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isc | Bind | Versions 4.9, 8.1 |