CVE-1999-1095

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1997-10-06 · updated 2026-06-16

Description

sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.

Affected products

RedHat Linux: 4.1
Slackware Linux: 3.3

References

http://marc.info/?l=bugtraq&m=87619953510834&w=2
http://marc.info/?l=bugtraq&m=88886870129518&w=2
http://marc.info/?l=bugtraq&m=88890116304676&w=2
http://marc.info/?l=bugtraq&m=87619953510834&w=2
http://marc.info/?l=bugtraq&m=88886870129518&w=2
http://marc.info/?l=bugtraq&m=88890116304676&w=2

Get alerted when CVE-1999-1095 or the next vulnerability affects your stack