CVE-1999-1288

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1998-11-19 · updated 2026-06-16

Description

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.

Affected products

Caldera Openlinux: 1.0, 1.1, 1.2, 1.3
RedHat Linux: all versions
Samba: 1.9.18
Turbolinux: all versions

References

http://www.caldera.com/support/security/advisories/SA-1998.35.txt
http://www.securityfocus.com/archive/1/11397
https://exchange.xforce.ibmcloud.com/vulnerabilities/1406
http://www.caldera.com/support/security/advisories/SA-1998.35.txt
http://www.securityfocus.com/archive/1/11397
https://exchange.xforce.ibmcloud.com/vulnerabilities/1406

Get alerted when CVE-1999-1288 or the next vulnerability affects your stack