CyberSec.Space Logo
Back to CVE Browser

CVE-1999-1299

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0970%
EPSS Percentile7.99th
PublishedFeb 3, 1997
Last ModifiedApr 16, 2026

Vulnerability Description

rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.

Affected Platforms (CPE)

💻
Redhat

Linux

= 4.0
💻
Slackware

Slackware Linux

= 3.1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=87602167420509&w=2
🔗 http://marc.info/?l=bugtraq&m=87602167420509&w=2

Related Vulnerabilities

CVE-1999-024310.0

Linux cfingerd could be exploited to gain root access.

CVE-1999-079810.0

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

CVE-1999-000210.0

Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

CVE-1999-066110.0

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP...