CVE Catalog

CVE-1999-1398

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.80%

52th percentile - higher than 52% of all known CVEs

Summary

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.

Risk Assessment

This vulnerability could lead to unauthorized access to the system and full control by local users.

Recommendation

It is recommended to restrict access to the bck.log file and to monitor and update the system to mitigate this vulnerability.

Original NVD description (English source)

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS