CVE-1999-1091: Rtin
Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
Affected products
Published 2002-01-15. Last modified 2026-09-25.