CVE-1999-1541 Race condition in n/a

High 7.2 Published Updated

Local attackers can read or modify shell scripts via symlink attacks on temporary files due to a race condition in Shell Lock.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-1999-1541?

CVE-1999-1541 is a high-severity vulnerability in n/a, published on 12 Sep 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.

Which versions are affected by CVE-1999-1541?

It affects 1 product.

Products include Cactus Software Shell-Lock.

How do I fix CVE-1999-1541?

No fix has been published for CVE-1999-1541 yet. Limit exposure of the affected software until one is available.

Is CVE-1999-1541 being exploited?

There is no known exploitation of CVE-1999-1541 in the wild and no public exploit code.

Sources

Also known as GHSA-hr9m-3c7j-qx9f.

Is CVE-1999-1541 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free