What’s Vulnerable › Vulnerabilities

CVE-1999-1210

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1997-11-12 · updated 2026-06-16

Description

xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.

Affected products

• Digital Unix: 4.0b

References

• http://marc.info/?l=bugtraq&m=87936891504885&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/613
• http://marc.info/?l=bugtraq&m=87936891504885&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/613

Get alerted when CVE-1999-1210 or the next vulnerability affects your stack