CVE-1999-1036: Cops

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk.

Affected products

• Cops Cops: version 1.04 only

Published 1998-06-26. Last modified 2026-06-16.