PT-1998-1138 · Gnu · Bash

Published 1998-09-05 · Updated 2017-10-10 · CVE-1999-1048

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions bash versions 1.4.17 through 2.0.0

Description The issue allows local attackers to gain privileges by creating an extremely large directory name. This name is inserted into the password prompt via the w option in the PS1 environmental variable when another user changes into that directory.

Recommendations For bash versions 1.4.17 through 2.0.0, consider restricting access to the PS1 environmental variable to minimize the risk of exploitation. As a temporary workaround, avoid using the w option in the PS1 variable until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-1999-1048

Affected Products

Bash

References · 6

• 🔥 http://securityfocus.com/archive/1/10542 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1048 · Security Note
• http://debian.org/security/1998/19980909 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3414 · Note
• http://osvdb.org/8345 · Note
• http://marc.info/?l=bugtraq&m=87602746719555&w=2 · Note