CVE-1999-1407 Path traversal in n/a

What is CVE-1999-1407?

CVE-1999-1407 is a low-severity path traversal vulnerability in Redhat Linux, published on 9 Mar 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.

Which versions are affected by CVE-1999-1407?

It affects 1 product.

Products include Redhat Linux.

How do I fix CVE-1999-1407?

No fix has been published for CVE-1999-1407 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-1999-1407 being exploited?

There is no known exploitation of CVE-1999-1407 in the wild and no public exploit code.

Other vulnerabilities in Redhat Linux

• CVE-2000-1220 Privilege escalation in n/a Critical 10.0
• CVE-2003-0248 Privilege escalation in n/a Critical 10.0
• CVE-1999-1542 Command injection in n/a Critical 10.0
• CVE-1999-1299 Privilege escalation in n/a Critical 10.0
• CVE-2000-0322 Command injection in n/a Critical 10.0

All Redhat Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2rcm-7f2m-m5qc.