CVE Catalog

CVE-1999-0374

Low
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

32th percentile — higher than 32% of all known CVEs

Summary

The cfengine package in Debian GNU/Linux is susceptible to a symlink attack.

Risk Assessment

An attacker could exploit this vulnerability to manipulate files and gain unauthorized access to the system.

Recommendation

It is recommended to update the cfengine package to the latest version to mitigate the risk associated with the symlink attack.

Original NVD description (English source)

Debian GNU/Linux cfengine package is susceptible to a symlink attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS