CVE Catalog
CVE-1999-0676
MediumExploitation Probability (EPSS)
Low risk0.31%
22th percentile - higher than 22% of all known CVEs
Summary
The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Risk Assessment
An attacker could exploit this vulnerability to modify or delete critical system files, potentially leading to data loss or system instability.
Recommendation
It is recommended to restrict access to the sdtcm_convert function and to monitor and secure the system against symlink attacks.
Original NVD description (English source)
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

