CVE Catalog
CVE-1999-1468
MediumExploitation Probability (EPSS)
Low risk0.34%
26th percentile - higher than 26% of all known CVEs
Summary
A vulnerability in rdist on various UNIX systems allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable when executing sendmail using popen.
Risk Assessment
This threat allows for privilege escalation, which can lead to unauthorized access to the system and its resources.
Recommendation
It is recommended to restrict access to rdist and to monitor and control environment variables to prevent local users from modifying IFS.
Original NVD description (English source)
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.