CVE-1999-1288

Published: Nov 19, 1998Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.

Affected (7)

Products: Samba: Samba · Caldera: Openlinux · Redhat: Linux · +1 more

Show all products

Samba: Samba · Caldera: Openlinux · Redhat: Linux · Turbolinux: Turbolinux

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 1.9.18

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Caldera Openlinux	Version 1.0
Caldera Openlinux	Version 1.1
Caldera Openlinux	Version 1.2
Caldera Openlinux	Version 1.3
Redhat Linux	All versions
Turbolinux Turbolinux	All versions

References (6)

http://www.caldera.com/support/security/advisories/SA-1998.35.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/11397

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/1406

Source: cve@mitre.org

http://www.caldera.com/support/security/advisories/SA-1998.35.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/11397

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/1406

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.