CVE-1999-1299

Published Sep 12, 2001 CVSS 2.0 · 10.0 Critical EPSS 1.8% KEV · Not listed
Description
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-1280 rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 5:11 PM
Reserved
Aug 31, 2001, 12:00 AM
Status
Modified
Published
Feb 3, 1997, 5:00 AM
Modified
Apr 16, 2026, 12:27 AM