CVE Catalog

CVE-1999-1269

Low
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

21th percentile — higher than 21% of all known CVEs

Summary

KDE beta 3 screen savers allow local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.

Risk Assessment

An attacker could exploit this vulnerability to overwrite critical system files, potentially leading to data loss or system instability.

Recommendation

It is recommended to upgrade to a newer version of KDE that addresses this vulnerability and to restrict access to the screen saver configuration files.

Original NVD description (English source)

Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS