CVE-1999-1168

CVE-1999-1168 describes a local privilege escalation vulnerability in the install.iss script for Internet Security Scanner (ISS) for Linux, specifically version 5.3. An attacker can exploit this flaw by performing a symlink attack on a temporary file, allowing them to arbitrarily change file permissions on the system. With a CVSS score of 7.2 (HIGH), this vulnerability is easily exploitable locally with low attack complexity and can lead to complete compromise of confidentiality, integrity, and availability. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this CVE.