CVE-1999-0491
CVSS 2.0 Score 4.6 of 10 (medium)
Details
Summary
CVE-1999-0491 is a vulnerability affecting the Bash shell that permits a local user to execute commands under the privileges of another user. By creating a directory with the name of a command to execute, a malicious user can manipulate the prompt parsing mechanism in Bash and gain unauthorized access to system functions. This issue poses a significant security risk, particularly in multi-user environments, and demands prompt attention and remediation. System administrators should update their Bash installations to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GNU Bash
Affected Vendors
- Free Software Foundation, Inc.