CVE-1999-1048 json
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large director…
published 1998-09-05 28 y ago modified 2026-06-16 4 mo ago also EUVD-1999-1029
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 45%
- public exploits
- 0
- none known
Summary
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Patch / fix
- debian.org/security/1998/19980909 advisory
Exploit prediction
0.53% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- securityfocus.com http://www.securityfocus.com/archive/1/10542 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
debian.org
/security/1998/19980909
vendor-advisory, patch
-
securityfocus.com
/archive/1/10542
mailing-list, exploit, vendor-advisory
-
osvdb.org
/8345
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/3414
vdb-entry
-
marc.info
/?l=bugtraq&m=87602746719555&w=2
mailing-list
Sources
- CVE List CVE-1999-1048
- NVD CVE-1999-1048
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.