CVE-1999-0491

CVSS 2.0 Score 4.6 of 10 (medium)

Details

Published Apr 20, 1999
Updated: Nov 20, 2024
CWE ID 94

Summary

CVE-1999-0491 is a vulnerability affecting the Bash shell that permits a local user to execute commands under the privileges of another user. By creating a directory with the name of a command to execute, a malicious user can manipulate the prompt parsing mechanism in Bash and gain unauthorized access to system functions. This issue poses a significant security risk, particularly in multi-user environments, and demands prompt attention and remediation. System administrators should update their Bash installations to the latest version to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • GNU Bash

Affected Vendors

  • Free Software Foundation, Inc.