VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 30, 1999· Updated Jun 16, 2026

CVE-1999-0434

CVE-1999-0434

Description

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Affected products

8
  • Xfree86/xfsllm-create
  • Caldera/Openlinux
    cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.0:r5:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*
  • NetBSD/NetBSD
    cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*
  • Red Hat/Linux
    cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*
  • SUSE S.A./Linux
    cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.