CVE-1999-0689

CDE dtspcd < - Command Injection

Title source: llm

Description

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Job de Haas of ITSX · bashlocalmultiple
https://www.exploit-db.com/exploits/19498

Scores

EPSS 0.0026
EPSS Percentile 48.9%

Details

Status published
Products (15)
cde/cde 1.0.1
cde/cde 1.0.2
cde/cde 1.1
cde/cde 1.2
cde/cde 2.0
cde/cde 2.1
cde/cde 2.120
sun/solaris 2.5
sun/solaris 2.5.1
sun/solaris 2.6
... and 5 more
Published Sep 13, 1999
Tracked Since Feb 18, 2026