Unscored severity · published Nov 19, 1998
CVE-1999-1288
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Redhat
All versions, or not specified · source: NVD
OP
Openlinux · Caldera
1.0; 1.1; 1.2; 1.3 · source: NVD
SA
Samba · Samba
1.9.18 · source: NVD
TU
Turbolinux · Turbolinux
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1288
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1288
Patch
http://www.caldera.com/support/security/advisories/SA-1998.35.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/11397
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/1406
More from Openlinux
9.8
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others
–
CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on…
–
CVE-2001-0851
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie
–
CVE-2001-0850
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit…
–
CVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the…