CVE Catalog

CVE-1999-1338

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.99%

58th percentile - higher than 58% of all known CVEs

Summary

Delegate proxy version 5.9.3 and earlier creates files and directories in DGROOT with world-writable permissions.

Risk Assessment

The ability for unauthorized users to modify or delete files poses a serious threat to system integrity.

Recommendation

It is recommended to upgrade to a newer version of Delegate proxy that does not have this vulnerability and to restrict write permissions in DGROOT.

Original NVD description (English source)

Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS