CVEvulnerability
CVE-1999-1383
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 1996-09-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
Affected configurations
• gnu bash (<= 1.14.6)
• gnu bash 1.14.0
• gnu bash 1.14.1
• gnu bash 1.14.2
• gnu bash 1.14.3
• gnu bash 1.14.4
• gnu bash 1.14.5
• tcsh tcsh 6.05
Related
Weakness · not in database (1)
References
- http://marc.info/?l=bugtraq&m=87602167419868&w=2 marc.info
- http://www.dataguard.no/bugtraq/1996_3/0503.html Exploit, Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=87602167419868&w=2 marc.info
- http://www.dataguard.no/bugtraq/1996_3/0503.html Exploit, Patch, Vendor Advisory