CVE-1999-1347

Medium

Published: 07/10/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

Xsession in Red Hat Linux 6.1 and earlier allows local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome, or another level from kdm.

Risk Assessment

The ability to bypass the .xsession file poses a risk that users with limited privileges may gain access to unauthorized functions or data.

Recommendation

It is recommended to update the system to a newer version to eliminate this vulnerability and to restrict access to accounts with limited privileges.

Original NVD description (English source)

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.