medium4.6Public exploit code

CVE-1999-0491

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

Vendor	Product	Affected versions
Gnu	Bash	through 2.04 Versions 1.14.0, 1.14.1, 1.14.2, 1.14.3, 1.14.4