CVE-1999-1299
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
包括Red Hat4.0在内的许多Linux系统上的rcp存在漏洞。“nobody”用户或其它UID为65535的用户可以利用该漏洞覆盖任意文件，因为65535可以被chown和其他系统看作-1，导致文件所有权修改调用失败。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-1999-1299
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux rcp漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
包括Red Hat4.0在内的许多Linux系统上的rcp存在漏洞。“nobody”用户或其它UID为65535的用户可以利用该漏洞覆盖任意文件，因为65535可以被chown和其他系统看作-1，导致文件所有权修改调用失败。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-1999-1299
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-1999-1299
请登录查看更多情报信息。
Mailing List Discussions for CVE-1999-1299 (1)
Same Patch Batch · n/a · 2001-09-12 · 393 CVEs total
| CVE-1999-1415 | ULTRIX /usr/bin/mail漏洞 | |
| CVE-1999-1429 | DIT TransferPro设备许可漏洞 | |
| CVE-1999-1428 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1427 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1426 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1425 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1424 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1422 | Slackware创建Trojan horse程序漏洞 | |
| CVE-1999-1421 | N-Base交换机漏洞 | |
| CVE-1999-1420 | N-Base交换机漏洞 | |
| CVE-1999-1418 | ICQ 99a文件存在信息泄露漏洞 | |
| CVE-1999-1417 | Solaris ab2 (DynaWeb) Server DoS &潜在木马漏洞 | |
| CVE-1999-1416 | Solaris ab2 (DynaWeb) Server DoS &潜在木马漏洞 | |
| CVE-1999-1405 | AIX snap不安全暂时文件创建漏洞 | |
| CVE-1999-1399 | IRIX SpaceWare spaceball权限许可和访问控制漏洞 | |
| CVE-1999-1400 | 经济学家屏幕保护程序中的漏洞 | |
| CVE-1999-1401 | IRIX searchbook漏洞 | |
| CVE-1999-1403 | IBM/Tivoli OPC Tracker Agent多重漏洞 | |
| CVE-1999-1404 | IBM/Tivoli OPC Tracker Agent多重漏洞 | |
| CVE-1999-1410 | IRIX /usr/lib/netaddpr漏洞 |
Showing top 20 of 393 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-1999-1299
No comments yet