CVE-1999-0491

GNU Ba — CWE-94

EPSS 0.3%
  • Published: 1999-04-20T04:00:00.000
  • Last modified: 2025-04-03T01:03:51.193
  • Vendors: GNU
  • Products: Ba
  • CWE: CWE-94

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

Related CVE by CWE

No related CWE found.

Top CVE for Vendor

  1. CVE-1999-0035 (CVSS 5.4)
  2. CVE-1999-0017 (no score)
  3. CVE-1999-0402 (no score)
  4. CVE-1999-0491 (no score)
  5. CVE-1999-1165 (no score)
  6. CVE-1999-1383 (no score)
  7. CVE-1999-0719 (no score)
  8. CVE-1999-0041 (no score)
  9. CVE-2000-0151 (no score)
  10. CVE-1999-0612 (no score)

Recently Exploited Similar Vulnerabilities

No recent KEV-listed items for this vendor/product.

How to fix CVE-1999-0491

CVE-1999-0491 is a unknown severity vulnerability affecting GNU Ba.

Description: The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. Related CVE by CWENo related CWE found.Top CVE for VendorCVE-1999-0035 (CVSS 5.4)CVE-1999-0017 (no score)CVE-1999-0402 (no score)CVE-1999-0491 (no score)CVE-1999-1165 (no score)CVE-1999-1383 (no score)CVE-1999-0719 (no score)CVE-1999-0041 (no score)CVE-2000-0151 (no score)CVE-1999-0612 […]

Exploit Difficulty: HARD
⏱️ Time to exploit: > 4 hours
🛠️ Required skills: Advanced security expertise
💰 Public exploits: Rare or not public

How to Fix:

1 Identify affected systems

- Check if you're running Ba

2 Immediate actions

- Update to the latest patched version
- If patching is not immediately possible: restrict network exposure, apply least-privilege access

3 Verification

- Test the fix in a staging environment first
- Review logs for signs of exploitation
- Monitor for IOCs (Indicators of Compromise)

4 Long-term prevention

- Enable automatic security updates
- Set up vulnerability monitoring
- Review and harden security configurations
CWE: CWE-94

Exploit Difficulty Assessment

HARD
⏱️ Time to Exploit: > 4 hours
🛠️ Skills Required: Advanced security expertise
💰 Public Exploits: Rare or not public

Vulnerability Timeline

Apr 20, 1999
Vulnerability Published

CVE details first published to NVD database

Apr 03, 2025
Last Modified

CVE details were updated

Oct 31, 2025
Imported to Database

Added to this CVE tracking system

Detection Rules & IOCs

No specific detection rules generated for this vulnerability type.

GNU Ba
Exit mobile version