What’s Vulnerable › Vulnerabilities

CVE-1999-1383

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1996-09-13 · updated 2026-06-16
• Weakness: CWE-264

Description

(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.

Affected products

• GNU Bash: through 1.14.6; 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5
• Tcsh: 6.05

References

• http://marc.info/?l=bugtraq&m=87602167419868&w=2
• http://www.dataguard.no/bugtraq/1996_3/0503.html
• http://marc.info/?l=bugtraq&m=87602167419868&w=2
• http://www.dataguard.no/bugtraq/1996_3/0503.html

Get alerted when CVE-1999-1383 or the next vulnerability affects your stack