CVE Catalog

CVE-1999-0388

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.66%

47th percentile - higher than 47% of all known CVEs

Summary

DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.

Risk Assessment

Local users can gain unauthorized access to administrator privileges, posing a serious security threat to the system.

Recommendation

It is recommended to limit trust in the PATH variable and review and modify suGuard configuration to minimize risk.

Original NVD description (English source)

DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS