Vulnerability Description
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Linux | 4.0 |
| Slackware | Slackware Linux | 3.1 |
References
FAQ
What is CVE-1999-1299?
CVE-1999-1299 is a vulnerability with a CVSS score of 10.0 (HIGH). rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls...
How severe is CVE-1999-1299?
CVE-1999-1299 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1299?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Linux, Slackware Slackware Linux.