CVE
- Id
- 1071
- CVE No.
- CVE-1999-1091
- Status
- Candidate
- Description
- UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
- Phase
- Proposed (20010912)
- Votes
- ACCEPT(1) Frech | NOOP(2) Cole, Foat
- Comments