CVE-1999-0462

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/339Patch, Vendor Advisory
http://www.securityfocus.com/bid/339Patch, Vendor Advisory

Timeline

Published: Mar 17, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-04642.1Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.CVE-1999-046510.0Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.CVE-1999-04667.2The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associat CVE-1999-04675.0The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.CVE-1999-04688.2Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.CVE-1999-04695.0Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the cli CVE-1999-04705.0A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.CVE-1999-04715.0The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.CVE-1999-04725.0The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.CVE-1999-04732.1The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the di CVE-1999-04745.0The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.CVE-1999-04751.2A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running