CVEvulnerability
CVE-1999-1048
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 1998-09-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Affected configurations
• debian debian linux 1.3.1
• redhat linux 4.2
References
- http://marc.info/?l=bugtraq&m=87602746719555&w=2 marc.info
- http://www.debian.org/security/1998/19980909 Patch, Vendor Advisory
- http://www.osvdb.org/8345 www.osvdb.org
- http://www.securityfocus.com/archive/1/10542 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3414 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=87602746719555&w=2 marc.info
- http://www.debian.org/security/1998/19980909 Patch, Vendor Advisory
- http://www.osvdb.org/8345 www.osvdb.org
- http://www.securityfocus.com/archive/1/10542 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3414 exchange.xforce.ibmcloud.com