Unscored CVE-1999-1091 EUVD-1999-1072GHSA-5p4h-63fp-mmxg

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modif…

Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre

Description

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.

References

19960903 [BUG] Vulnerability in TIN mailing-list
tin-tmpfile(431) vdb-entry
19960903 Re: BoS: [BUG] Vulnerability in TIN mailing-list
19970329 symlink bug in tin/rtin mailing-list