CVE Catalog

CVE-1999-1288

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.46%

36th percentile - higher than 36% of all known CVEs

Summary

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions, including the setgid bit.

Risk Assessment

Local users may read and write files and possibly gain privileges via bugs in the program.

Recommendation

It is recommended to correct the permissions of the wsmbconf application and remove the setgid bit.

Original NVD description (English source)

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS