CVE-1999-1288
First published: Thu Nov 19 1998(Updated: )
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba | =1.9.18 | |
| SCO OpenLinux Server | =1.0 | |
| SCO OpenLinux Server | =1.1 | |
| SCO OpenLinux Server | =1.2 | |
| SCO OpenLinux Server | =1.3 | |
| Red Hat Linux | ||
| Turbolinux |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-1999-1288?
CVE-1999-1288 has a high severity due to the potential for local users to exploit incorrect file permissions and gain elevated privileges.
How do I fix CVE-1999-1288?
To fix CVE-1999-1288, you should remove the setgid bit from the wsmbconf application and ensure proper file permissions.
What versions of Samba are affected by CVE-1999-1288?
CVE-1999-1288 specifically affects Samba version 1.9.18.
Can CVE-1999-1288 be exploited remotely?
No, CVE-1999-1288 can only be exploited by local users on systems where the vulnerable version of Samba is installed.
Which operating systems are impacted by CVE-1999-1288?
CVE-1999-1288 affects several versions of SCO OpenLinux, Red Hat Linux, and Turbolinux that include Samba 1.9.18.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/remedy
- agent/severity
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/samba
- product/samba
- canonical/samba samba
- vendor/caldera
- product/openlinux
- canonical/caldera openlinux
- vendor/turbolinux
- product/turbolinux
- canonical/turbolinux turbolinux
- vendor/redhat
- product/linux
- canonical/redhat linux
- collector/nvd-index
- canonical/samba
- version/samba/1.9.18
- canonical/sco openlinux server
- version/sco openlinux server/1.0
- version/sco openlinux server/1.1
- version/sco openlinux server/1.2
- version/sco openlinux server/1.3
- canonical/red hat linux
- canonical/turbolinux