VYPR
Unrated severityNVD Advisory· Published Jan 15, 2002· Updated Apr 16, 2026

CVE-1999-1091

CVE-1999-1091

Description

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.

Affected products

2
  • cpe:2.3:a:rtin:rtin:*:*:*:*:*:*:*:*
  • cpe:2.3:a:tin:tin:1.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.