CVE-1999-0138

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Jun 26, 1996
Updated: Nov 20, 2024

Summary

CVE-1999-0138 is a vulnerability affecting the suidperl and sperl programs. These programs, which allow users to run Perl scripts with root privileges, fail to relinquish root access upon a UID change, resulting in unintended persistent root access. This issue poses a significant security risk, as it enables attackers to maintain root privileges beyond their intended use, potentially leading to unauthorized system modifications or data theft. Users are advised to update their suidperl and sperl implementations to patch this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FreeBSD
  • IBM AIX
  • Linux Kernel
  • HP-UX

Affected Vendors

  • IBM Corporation
  • LINUX
  • HP
  • FreeBSD Project
  • Apple