CVE-1999-1388

31th percentile - higher than 31% of all known CVEs

The passwd program in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.

An attacker could exploit this vulnerability to overwrite critical system files, potentially leading to system instability or unauthorized access.

It is recommended to update the system to a newer version that does not contain this vulnerability and to restrict access to the passwd program.