Local Privilege Escalation in Bash and Tcsh Shells

CVE-1999-1383

What is CVE-1999-1383?

The vulnerability in certain versions of Bash and Tcsh allows local users to gain elevated privileges through the manipulation of directory names containing shell metacharacters, such as back-ticks. When filename expansions are performed, the commands within these directory names can be executed inadvertently, leading to potential exploitation by malicious users. This issue highlights the risks associated with improperly sanitized inputs in shell environments.

References