VulnerabilityModified
CVE-1999-1496
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
LOW 2.1EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.52% probability · 42th percentile
- CISA KEV
- Not listed
- Affected
- todd miller/sudo · debian/debian linux · redhat/linux
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/14665Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/321Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2277
- http://www.securityfocus.com/archive/1/14665Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/321Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2277
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.