CVE-1999-1348
LowExploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
Risk Assessment
Local users may exploit this vulnerability to disrupt system operations, potentially leading to downtime for the organization.
Recommendation
It is recommended to upgrade the system to a newer version that addresses access management for the shutdown command.
Other vulnerabilities in Linuxconf
See all- CVE-2000-0017High
Buffer overflow in the Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
- CVE-1999-1327High
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
- CVE-1999-1328High
A vulnerability in linuxconf before version 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
Original NVD description (English source)
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS