CVE-1999-1173: Low severity Corel WordPerfect vulnerability
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Corel WordPerfect Converterfrom your environment.Uninstall the Corel WordPerfect Converter (WordPerfect 8 for Linux) if it is not required on the system to eliminate the vulnerability.
- Configuration
Ensure the application creates its temporary working directory with restrictive permissions (do not allow world-writable). If the application exposes a configuration or can be launched with a restrictive umask, set it so temporary directories are created without world-write permissions; otherwise adjust the created directory's permissions immediately after creation.
Corel WordPerfect Converter (WordPerfect 8 for Linux) temporary working directory permissions = not world-writable - Compensating control
Limit risk from local users until the application is fixed: restrict which local accounts can run or access the converter and its temporary directories (use filesystem ACLs or local account management), or run the converter only on isolated/trusted hosts to prevent unprivileged local users from exploiting world-writable temp directories.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1173?
CVE-1999-1173 is considered a moderate severity vulnerability due to its potential for local exploitation.
How do I fix CVE-1999-1173?
To fix CVE-1999-1173, change the permissions of the temporary working directory created by Corel Word Perfect 8 for Linux to ensure it is not world-writable.
Who is affected by CVE-1999-1173?
Local users on systems running Corel Word Perfect 8 for Linux are affected by CVE-1999-1173.
What kind of attacks can be executed due to CVE-1999-1173?
CVE-1999-1173 allows local users to modify the behavior of Word Perfect or perform a symlink attack to alter files of other users.
Is there a patch for CVE-1999-1173?
No official patch exists for CVE-1999-1173, so manual remediation of permissions is necessary.