CVE-1999-1210

Published Sep 12, 2001 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-1191 xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 5:02 PM
Reserved
Aug 31, 2001, 12:00 AM
Status
Modified
Published
Nov 12, 1997, 5:00 AM
Modified
Apr 16, 2026, 12:27 AM