CVE-1999-1091

CVE-1999-1091

Medium · published January 15, 2002

CVSS v2.0
5.0
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS v4.0
Not supplied
EPSS
0.01282 · 69.8th percentile
Published
2002-01-15T10:00Z
Affected products (2)
ProductVersionsFixed in
rtin/rtinall versions—
tin/tinall versions—
References (8)
http://marc.info/?l=bugtraq&m=87602167419835&w=2 · [email protected]http://marc.info/?l=bugtraq&m=87602167419839&w=2 · [email protected]http://marc.info/?l=bugtraq&m=87602167420726&w=2 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/431 · [email protected]http://marc.info/?l=bugtraq&m=87602167419835&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=87602167419839&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=87602167420726&w=2 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/431 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 12 SEP 04:00Z
    UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of…
    cvelistv5