CVE Catalog
CVE-1999-0491
MediumExploitation Probability (EPSS)
Elevated risk0.87%
54th percentile - higher than 54% of all known CVEs
Summary
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Risk Assessment
This vulnerability may lead to unauthorized access to the system, allowing local users to execute commands with the privileges of other users.
Recommendation
It is recommended to restrict access to bash and to monitor and control user permissions in the system.
Original NVD description (English source)
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.