CVE-1999-1048
MediumExploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Risk Assessment
Attackers can gain unauthorized privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update to the latest version of bash and restrict access to the PS1 variable for unauthorized users.
Original NVD description (English source)
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.