CVE-1999-1383: gnu bash

Vulnerability summary

CVE-1999-1383 is a medium (CVSS 4.6) vulnerability in gnu bash. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 12-09-2001
   PublishedVulnerability first disclosed.
2. 01-08-2024
   Last modifiedVulnerability information updated.

Description

(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.