CVE-1999-0813

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Aug 10, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-081410.0Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.CVE-1999-08155.0Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a larg CVE-1999-081710.0Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain CVE-1999-08187.2Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.CVE-1999-08195.0NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.CVE-1999-08204.6FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.CVE-1999-08214.6FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.CVE-1999-082210.0Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.CVE-1999-08234.6Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.CVE-1999-08244.6A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that CVE-1999-08253.6The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.CVE-1999-08264.6Buffer overflow in FreeBSD angband allows local users to gain privileges.