CVE Catalog

CVE-1999-0676

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

22th percentile - higher than 22% of all known CVEs

Summary

The sdtcm_convert function in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

Risk Assessment

An attacker could exploit this vulnerability to modify or delete critical system files, potentially leading to data loss or system instability.

Recommendation

It is recommended to restrict access to the sdtcm_convert function and to monitor and secure the system against symlink attacks.

Original NVD description (English source)

sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS