CVE-1999-0138
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/06/1996
Last modified:
03/04/2025
Description
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Impact
Base Score 2.0
7.20
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:apple:a_ux:3.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:digital:osf_1:1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:1.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:nec:asl_ux_4800:*:*:*:*:*:*:*:* | ||
| cpe:2.3:o:nec:ews-ux_v:4.2:*:*:*:*:*:*:* | ||
| cpe:2.3:o:nec:ews-ux_v:4.2mp:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page