Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-1194

4 documents4 sources
Severity
7.2HIGH
EPSS
0.1%
top 69.04%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Digital Ultrix
Timeline
PublishedMay 1
Latest updateApr 30

Description

chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDdigital/ultrix4.0, 4.1+1

Patches

Patch: www.cert.org ↗Patch: www.cert.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-3cv5-x72m-qrqh: chroot in Digital Ultrix 4↗2022-04-30
▶
CVEList
CVE-1999-1194: chroot in Digital Ultrix 4↗2002-03-09
▶

💥Exploits & PoCs

1
Exploit-DB
Digital Ultrix 4.0/4.1 - '/usr/bin/chroot' Local Privilege Escalation↗1991-05-01
▶