CVE-1999-0689
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Sep 13, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0689 is a vulnerability affecting the CDE dtspcd daemon. This issue permits local users to execute arbitrary commands through a symlink attack. By creating a symbolic link to a malicious file, an attacker can manipulate the daemon into executing unintended commands, potentially resulting in system compromise. This vulnerability highlights the importance of proper file and symbolic link handling to prevent unauthorized command execution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Sun Solaris
- SunOS
Affected Vendors
- Oracle Corp
- Sun.