CVE-1999-0138
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Jun 26, 1996
Updated: Nov 20, 2024
Summary
CVE-1999-0138 is a vulnerability affecting the suidperl and sperl programs. These programs, which allow users to run Perl scripts with root privileges, fail to relinquish root access upon a UID change, resulting in unintended persistent root access. This issue poses a significant security risk, as it enables attackers to maintain root privileges beyond their intended use, potentially leading to unauthorized system modifications or data theft. Users are advised to update their suidperl and sperl implementations to patch this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- FreeBSD
- IBM AIX
- Linux Kernel
- HP-UX
Affected Vendors
- IBM Corporation
- LINUX
- HP
- FreeBSD Project
- Apple