Vulnerability in Slackware Linux
CVE-1999-1299
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.
Affected products
- Slackware Slackware_linux — versions 3.1
- Redhat Linux — versions 4.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)