4.6

CVE-1999-0491

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Bash Version <= 2.04
Gnu ≫ Bash Version1.14.0
Gnu ≫ Bash Version1.14.1
Gnu ≫ Bash Version1.14.2
Gnu ≫ Bash Version1.14.3
Gnu ≫ Bash Version1.14.4
Gnu ≫ Bash Version1.14.5
Gnu ≫ Bash Version1.14.6
Gnu ≫ Bash Version1.14.7
Gnu ≫ Bash Version2.0
Gnu ≫ Bash Version2.01
Gnu ≫ Bash Version2.01.1
Gnu ≫ Bash Version2.02
Gnu ≫ Bash Version2.02.1
Gnu ≫ Bash Version2.03
Gnu ≫ Bash Version2.05
Gnu ≫ Bash Version2.05 Updatea
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.529
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.