CVE-1999-0371
LowExploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Risk Assessment
An attacker could exploit this vulnerability to modify or delete important files, potentially leading to data loss or system integrity issues.
Recommendation
It is recommended to restrict access to the /tmp directory and monitor symlinks to prevent unauthorized operations.
Other vulnerabilities in Lynx
See all- CVE-2016-9179High
It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?'. This could lead to the program connecting to a different host.
- CVE-2000-0209High
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
- CVE-1999-1549High
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Original NVD description (English source)
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS