CVE-1999-1394 Security feature bypass in n/a
Root users can bypass file immutability protections by unmounting the filesystem and editing it directly, requiring local access and root privileges.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-1394?
CVE-1999-1394 is a low-severity vulnerability in n/a, published on 12 Sep 2001. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.
Which versions are affected by CVE-1999-1394?
It affects 1 product.
Products include Bsd Bsd.
How do I fix CVE-1999-1394?
No fix has been published for CVE-1999-1394 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-1394 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-1999-1394 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f7wg-pwf9-wgf9.