CVE-1999-1168: High severity iss Internet Security Scanner vulnerability

Published Feb 20, 1999
·
Updated

install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.

Affected Software

1 affected component
iss Internet Security Scanner=5.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Remove

    Remove ISS Internet Security Scanner (install.iss) from your environment.

    Do not use or distribute the vulnerable install.iss installation script. Remove or delete the install.iss installer from systems and avoid running it until a vendor-supplied fix is available; if the product is not required, uninstall the ISS software.

  2. Compensating control

    Perform installations only from a secure administrative environment where unprivileged local users cannot create symlinks to the installer's temporary files (for example: run the installer in single-user mode or on an isolated system with no other local accounts).

  3. Operational

    If the vulnerable installer was run on a multi-user system, inspect for and remediate unauthorized permission changes to files (restore from known-good backups or reinstall affected files) and audit the system for signs of misuse.

Event History

Feb 20, 1999
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Sep 12, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-1999-1168?

CVE-1999-1168 is considered a moderate severity vulnerability due to the potential for local users to exploit a symlink attack.

2

How do I fix CVE-1999-1168?

To mitigate CVE-1999-1168, ensure that the permissions and ownership of temporary files are properly configured to prevent unauthorized access.

3

What systems are affected by CVE-1999-1168?

CVE-1999-1168 affects version 5.3 of the ISS Internet Security Scanner installed on Linux systems.

4

Can CVE-1999-1168 be exploited remotely?

CVE-1999-1168 cannot be exploited remotely as it requires local user access.

5

What is a symlink attack in the context of CVE-1999-1168?

A symlink attack in CVE-1999-1168 allows a local user to create a symbolic link to modify the permissions of arbitrary files during the installation process.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203