CVE-1999-1496

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/14665Exploit, Vendor Advisory
http://www.securityfocus.com/bid/321Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2277
http://www.securityfocus.com/archive/1/14665Exploit, Vendor Advisory
http://www.securityfocus.com/bid/321Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2277

Timeline

Published: Jun 8, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-14977.2Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-ma CVE-1999-15005.0Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL com CVE-1999-150810.0Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undoc CVE-1999-15095.0Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot CVE-1999-15107.5Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary co CVE-1999-15117.5Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a lon CVE-1999-151210.0The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message w CVE-1999-15137.5Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.CVE-1999-15147.5Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary com CVE-1999-15155.0A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender an CVE-1999-15167.5A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary cod CVE-1999-15177.2runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrit