CVE-1999-1048: Buffer Overflow
First published: Sat Sep 05 1998(Updated: )
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian GNU/Linux | =1.3.1 | |
| Red Hat Linux | =4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-1999-1048?
CVE-1999-1048 is considered a high severity vulnerability due to its potential to allow local attackers to gain elevated privileges.
How do I fix CVE-1999-1048?
To fix CVE-1999-1048, update bash to a version that is not vulnerable to buffer overflow exploitation.
Which systems are affected by CVE-1999-1048?
CVE-1999-1048 affects bash versions 2.0.0, 1.4.17, and other versions on systems such as Debian 1.3.1 and Red Hat Linux 4.2.
What is the cause of CVE-1999-1048?
CVE-1999-1048 is caused by a buffer overflow that occurs when bash processes an oversized directory name through the PS1 environmental variable.
Can CVE-1999-1048 be exploited remotely?
CVE-1999-1048 cannot be exploited remotely; it requires local access to the vulnerable system.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/remedy
- agent/references
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- collector/nvd-index
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/1.3.1
- vendor/redhat
- canonical/red hat linux
- version/red hat linux/4.2