high7.2Public exploit code
CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Slackware Linux 3.5 - '/etc/group' Local Privilege Escalation1998-07-13 · local · linux · Verified
Impact
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slackware | Slackware Linux | Versions 3.1, 3.2, 3.3, 3.4, 3.5 |