Vulnerability in Gnu Bash

CVE-1999-1383

(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell e…

EPSS: 0.004 (32.4th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Bash — versions 1.14.0, 1.14.1, 1.14.2
  • Tcsh — versions 6.05
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)