Vulnerability in Slackware Linux
CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
EPSS: 0.008 (52.5th percentile) — read the EPSS interpretation.
Affected products
- Slackware Slackware_linux — versions 3.1, 3.2, 3.3
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)