## Description

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### xfree86_project - x11r6

Affected Versions:

- 3.3.3

### netbsd - netbsd

Affected Versions:

- 1.3.2

### netbsd - netbsd

Affected Versions:

- 1.3.3

### redhat - linux

Affected Versions:

- 5.1

### redhat - linux

Affected Versions:

- 5.2

### slackware - slackware_linux

Affected Versions:

- 3.3

### slackware - slackware_linux

Affected Versions:

- 3.4

### slackware - slackware_linux

Affected Versions:

- 3.5

### slackware - slackware_linux

Affected Versions:

- 3.6

### slackware - slackware_linux

Affected Versions:

- 4.0

### suse - suse_linux

Affected Versions:

- 5.1

### suse - suse_linux

Affected Versions:

- 5.2

### suse - suse_linux

Affected Versions:

- 6.0

### suse - suse_linux

Affected Versions:

- 6.1

## References

- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433

Neural Processor Active