What’s Vulnerable › Vulnerabilities

CVE-1999-0433

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1999-03-21 · updated 2026-06-16

Description

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Affected products

• Netbsd: 1.3.2, 1.3.3
• RedHat Linux: 5.1, 5.2
• Slackware Linux: 3.3, 3.4, 3.5, 3.6, 4.0
• Suse Linux: 5.1, 5.2, 6.0, 6.1
• Xfree86 Project X11R6: 3.3.3

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433

Get alerted when CVE-1999-0433 or the next vulnerability affects your stack