CVE-1999-1221: Digital Unix

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.

Affected products

• Digital Unix: version 3 only

Published 1996-11-17. Last modified 2026-06-16.