First published: Fri Jul 02 1999(Updated: )
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
BSD | =4.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-1999-1394 is considered medium due to the potential for unauthorized modification of file attributes.
To fix CVE-1999-1394, ensure that the system is running at a security level higher than 1 to prevent unauthorized access by the root user.
CVE-1999-1394 affects BSD 4.4 based operating systems that are configured to run at security level 1.
CVE-1999-1394 allows the root user to circumvent file integrity protections, potentially leading to data loss or system compromise.
System administrators and users of BSD 4.4 based operating systems are primarily impacted by CVE-1999-1394 due to its security implications.