Vulnerability Details CVE-1999-0138
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 48.4%
CVSS Severity
CVSS v2 Score 7.2
Products affected by CVE-1999-0138
-
cpe:2.3:o:apple:a_ux:3.1.1
-
cpe:2.3:o:digital:osf_1:1.3
-
cpe:2.3:o:freebsd:freebsd:2.0
-
cpe:2.3:o:freebsd:freebsd:2.0.5
-
cpe:2.3:o:freebsd:freebsd:2.1.0
-
-
-
-
-
-
cpe:2.3:o:linux:linux_kernel:1.2.0
-
cpe:2.3:o:linux:linux_kernel:2.0
-
cpe:2.3:o:nec:asl_ux_4800:-
-
cpe:2.3:o:nec:ews-ux_v:4.2
-
cpe:2.3:o:nec:ews-ux_v:4.2mp
-
cpe:2.3:o:nec:up-ux_v:4.2mp