CVE Catalog
CVE-1999-0433
MediumExploitation Probability (EPSS)
Low risk0.71%
49th percentile - higher than 49% of all known CVEs
Summary
The startx command in XFree86 is vulnerable to a symlink attack, allowing local users to create files in restricted directories, potentially leading to privilege escalation or denial of service.
Risk Assessment
An attacker could exploit this vulnerability to escalate privileges or disrupt system operations, posing a significant security risk to the organization.
Recommendation
It is recommended to update XFree86 to the latest version and implement appropriate security measures to mitigate the risk of symlink attacks.
Original NVD description (English source)
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.