Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0836

4 documents4 sources
Severity
10.0CRITICAL
EPSS
2.2%
top 15.66%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SCO Unixware
Timeline
PublishedDec 2
Latest updateMay 3

Description

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDsco/unixware4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-7fhw-cm9m-7vr5: UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack↗2022-05-03
▶
CVEList
CVE-1999-0836: UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack↗2000-06-02
▶

💥Exploits & PoCs

1
Exploit-DB
SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'uidadmin' Local Privilege Escalation↗1998-12-02
▶
CVE-1999-0836 (CRITICAL CVSS 10) | UnixWare uidadmin allows local user | cvebase.io