VULNERABILITY INTELLIGENCE
CVE-1999-1434
CVSS score7.2 NONE
EPSS probability0.79%
CISA KEVNot currently listed
Published1998-07-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other