CVE-1999-1383: Medium severity GNU Bash vulnerability
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters ( back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Bashto a version that resolves this vulnerability.Fixed in 1.14.7 - Configuration
Remove or avoid using the \w escape sequence in the PS1 prompt so the shell does not expand directory names containing shell metacharacters (e.g., back-tick `).
Bash PS1 (\w) = remove \w from PS1 - Compensating control
Until affected shells are patched, prevent or sanitize directory names containing shell metacharacters (for example block or reject names containing the back-tick character) to reduce the risk of local users gaining privileges via crafted directory names.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1383?
CVE-1999-1383 is considered a local privilege escalation vulnerability affecting certain versions of bash and tcsh.
How do I fix CVE-1999-1383?
To fix CVE-1999-1383, upgrade to bash version 1.14.7 or later, or to a version of tcsh that is beyond 6.05.
Which software versions are affected by CVE-1999-1383?
CVE-1999-1383 affects GNU Bash versions prior to 1.14.7 and Tcsh version 6.05.
Can CVE-1999-1383 be exploited remotely?
CVE-1999-1383 cannot be exploited remotely as it requires local access to the system.
What type of systems are vulnerable to CVE-1999-1383?
Systems using vulnerable versions of bash or tcsh, particularly in environments where users have local access, are at risk for CVE-1999-1383.