Vulnerabilities > CVE-1999-1422 - Unspecified vulnerability in Slackware Linux 2.0.35/3.4

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
slackware

Summary

The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.

Vulnerable Configurations

Part Description Count
OS
Slackware
2