CVE-1999-1491

High

Published: 02/02/1996(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.92%

77th percentile - higher than 77% of all known CVEs

Summary

In Red Hat 2.1, the abuse.console tool uses relative pathnames to locate and execute the undrv program, allowing local users to execute arbitrary commands via a path pointing to a Trojan horse program.

Risk Assessment

Local users can exploit this vulnerability to run unauthorized commands, posing a serious security threat to the system.

Recommendation

It is recommended to avoid using relative paths in scripts and to update the system to a newer version to mitigate this vulnerability.

Other vulnerabilities in Red Hat 2.1

See all

CVE-2000-0219High
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
CVE-2000-0093High
A Red Hat installation uses DES password encryption with crypt() for the initial password instead of md5.

Original NVD description (English source)

abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.