Is CVE-1999-0433 actively exploited?

A proof-of-concept exploit is publicly available for CVE-1999-0433, but active exploitation has not been confirmed.

Can CVE-1999-0433 be exploited remotely?

No. CVE-1999-0433 requires local access to exploit.

What is the CVSS score of CVE-1999-0433?

CVE-1999-0433 has a CVSS score of 4.6 (MEDIUM).

HOME VULNERABILITIESCVE-1999-0433

MEDIUMPOC

CVE-1999-0433

NVD-CWE-OtherPublished: March 21, 1999· Updated: Jun 16, 2026

4.6

CVSS v3.1

Official Description

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

NVD Source

Technical Analysis

CVE-1999-0433 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-1999-0433. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.